@heimdall-ai/heimdall 0.1.0

package/dist/server.js

@@ -0,0 +1,51 @@
+#!/usr/bin/env node
+/**
+ * Heimdall MCP Server
+ *
+ * A TypeScript MCP server providing sandboxed Python and Bash execution.
+ * Named after the Norse god who guards the Bifröst bridge, Heimdall watches
+ * over code execution with security and vigilance.
+ *
+ * Features:
+ * - Secure Python execution via Pyodide (WebAssembly sandbox)
+ * - Bash command execution via just-bash
+ * - Virtual filesystem with host sync
+ * - Package installation via micropip
+ * - Session persistence
+ */
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { PyodideManager } from "./core/pyodide-manager.js";
+import { BashManager } from "./core/bash-manager.js";
+import { registerAllTools } from "./tools/index.js";
+import { registerAllResources } from "./resources/index.js";
+/**
+ * Main entry point
+ */
+async function main() {
+    console.error("[Heimdall] Starting server...");
+    // Create manager instances
+    const pyodideManager = new PyodideManager();
+    const bashManager = new BashManager();
+    // Create MCP server
+    const server = new McpServer({
+        name: "heimdall",
+        version: "1.0.0",
+    });
+    // Register all tools and resources
+    registerAllTools(server, pyodideManager, bashManager);
+    registerAllResources(server, pyodideManager);
+    // Pre-initialize managers (optional, improves first tool call latency)
+    // Note: Disabled for now - managers will initialize lazily on first use
+    // await pyodideManager.initialize();
+    // await bashManager.initialize();
+    // Connect transport
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    console.error("[Heimdall] Server connected and ready");
+}
+main().catch((error) => {
+    console.error("[Heimdall] Fatal error:", error);
+    process.exit(1);
+});
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE5D;;GAEG;AACH,KAAK,UAAU,IAAI;IACjB,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAE/C,2BAA2B;IAC3B,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;IAC5C,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;IAEtC,oBAAoB;IACpB,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;IAEH,mCAAmC;IACnC,gBAAgB,CAAC,MAAM,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC;IACtD,oBAAoB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAE7C,uEAAuE;IACvE,wEAAwE;IACxE,qCAAqC;IACrC,kCAAkC;IAElC,oBAAoB;IACpB,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhC,OAAO,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;AACzD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;IAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/tools/bash-execution.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Bash Execution Tools
+ *
+ * Provides tools for executing bash commands in the Heimdall environment
+ */
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { BashManager } from "../core/bash-manager.js";
+import type { PyodideManager } from "../core/pyodide-manager.js";
+/**
+ * Register bash execution tools with the MCP server
+ */
+export declare function registerBashExecutionTools(server: McpServer, bashManager: BashManager, pyodideManager: PyodideManager): void;
+//# sourceMappingURL=bash-execution.d.ts.map

package/dist/tools/bash-execution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bash-execution.d.ts","sourceRoot":"","sources":["../../src/tools/bash-execution.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAIjE;;GAEG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,WAAW,EACxB,cAAc,EAAE,cAAc,GAC7B,IAAI,CAgIN"}

package/dist/tools/bash-execution.js

@@ -0,0 +1,135 @@
+/**
+ * Bash Execution Tools
+ *
+ * Provides tools for executing bash commands in the Heimdall environment
+ */
+import { z } from "zod";
+import { posix as path } from "path";
+/**
+ * Register bash execution tools with the MCP server
+ */
+export function registerBashExecutionTools(server, bashManager, pyodideManager) {
+    server.registerTool("execute_bash", {
+        title: "Execute Bash",
+        description: `Execute a bash command in the Heimdall environment.
+
+Features:
+- Supports 50+ built-in commands: grep, sed, awk, find, jq, curl, tar, etc.
+- Pipes and redirections: |, >, >>, 2>, 2>&1
+- Variables, loops, conditionals, and functions
+- File operations: ls, cat, cp, mv, rm, mkdir, etc.
+- Text processing: grep, sed, awk, cut, sort, uniq, wc, etc.
+- Data tools: jq (JSON), sqlite3 (SQLite), xan (CSV), yq (YAML)
+- Find and search: find, grep, rg (ripgrep)
+
+The command runs with access to the /workspace directory. All file changes are immediately visible to Python code.
+
+Security:
+- No real processes spawned (TypeScript simulation)
+- Execution limits prevent infinite loops
+- Network access disabled by default
+- Filesystem limited to workspace directory
+
+Examples:
+- Find files: "find . -name '*.py' -type f"
+- Process text: "cat data.txt | grep 'pattern' | wc -l"
+- JSON query: "cat data.json | jq '.users[] | {name, email}'"
+- Multiple commands: "ls -la && cat README.md | head -10"`,
+        inputSchema: {
+            command: z.string().describe("The bash command to execute"),
+            cwd: z
+                .string()
+                .optional()
+                .describe("Working directory (relative to /workspace, e.g., 'subdir' or '.')"),
+        },
+    }, async ({ command, cwd }) => {
+        try {
+            // Validate cwd to prevent path traversal attacks
+            if (cwd) {
+                // Normalize the path to resolve any '..' components
+                const normalizedCwd = path.normalize(cwd);
+                // Check if it's an absolute path
+                if (path.isAbsolute(normalizedCwd)) {
+                    // Absolute paths must be exactly /workspace or start with /workspace/
+                    if (normalizedCwd !== "/workspace" && !normalizedCwd.startsWith("/workspace/")) {
+                        return {
+                            content: [
+                                {
+                                    type: "text",
+                                    text: `Invalid working directory: Absolute paths must be within /workspace (got: ${normalizedCwd})`,
+                                },
+                            ],
+                            isError: true,
+                        };
+                    }
+                }
+                else {
+                    // Relative paths: resolve from /workspace and check if it stays within
+                    const resolvedPath = path.join("/workspace", normalizedCwd);
+                    if (resolvedPath !== "/workspace" && !resolvedPath.startsWith("/workspace/")) {
+                        return {
+                            content: [
+                                {
+                                    type: "text",
+                                    text: `Invalid working directory: Path traversal detected (resolved to: ${resolvedPath})`,
+                                },
+                            ],
+                            isError: true,
+                        };
+                    }
+                }
+            }
+            // Execute bash command
+            const result = await bashManager.execute(command, { cwd });
+            // Sync changes to Pyodide virtual filesystem
+            // This ensures Python sees any file modifications made by bash
+            await pyodideManager.syncHostToVirtual();
+            // Combine stdout and stderr for output
+            let output = "";
+            if (result.stdout) {
+                output += result.stdout;
+            }
+            if (result.stderr) {
+                if (output)
+                    output += "\n";
+                output += result.stderr;
+            }
+            // Return based on exit code
+            if (result.exitCode === 0) {
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: output || "Command executed successfully (no output)",
+                        },
+                    ],
+                };
+            }
+            else {
+                // Non-zero exit code indicates failure
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: `Command failed with exit code ${result.exitCode}\n${output}`,
+                        },
+                    ],
+                    isError: true,
+                };
+            }
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error ? error.message : String(error);
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `Error executing bash command: ${errorMessage}`,
+                    },
+                ],
+                isError: true,
+            };
+        }
+    });
+}
+//# sourceMappingURL=bash-execution.js.map

package/dist/tools/bash-execution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bash-execution.js","sourceRoot":"","sources":["../../src/tools/bash-execution.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,KAAK,IAAI,IAAI,EAAE,MAAM,MAAM,CAAC;AAErC;;GAEG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAAiB,EACjB,WAAwB,EACxB,cAA8B;IAE9B,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE;;;;;;;;;;;;;;;;;;;;;;;0DAuBuC;QACpD,WAAW,EAAE;YACX,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;YAC3D,GAAG,EAAE,CAAC;iBACH,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,mEAAmE,CAAC;SACjF;KACF,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE;QACzB,IAAI,CAAC;YACH,iDAAiD;YACjD,IAAI,GAAG,EAAE,CAAC;gBACR,oDAAoD;gBACpD,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBAE1C,iCAAiC;gBACjC,IAAI,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;oBACnC,sEAAsE;oBACtE,IAAI,aAAa,KAAK,YAAY,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;wBAC/E,OAAO;4BACL,OAAO,EAAE;gCACP;oCACE,IAAI,EAAE,MAAM;oCACZ,IAAI,EAAE,6EAA6E,aAAa,GAAG;iCACpG;6BACF;4BACD,OAAO,EAAE,IAAI;yBACd,CAAC;oBACJ,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,uEAAuE;oBACvE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;oBAC5D,IAAI,YAAY,KAAK,YAAY,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;wBAC7E,OAAO;4BACL,OAAO,EAAE;gCACP;oCACE,IAAI,EAAE,MAAM;oCACZ,IAAI,EAAE,oEAAoE,YAAY,GAAG;iCAC1F;6BACF;4BACD,OAAO,EAAE,IAAI;yBACd,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YAED,uBAAuB;YACvB,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;YAE3D,6CAA6C;YAC7C,+DAA+D;YAC/D,MAAM,cAAc,CAAC,iBAAiB,EAAE,CAAC;YAEzC,uCAAuC;YACvC,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;YAC1B,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,IAAI,MAAM;oBAAE,MAAM,IAAI,IAAI,CAAC;gBAC3B,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;YAC1B,CAAC;YAED,4BAA4B;YAC5B,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC1B,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,MAAM,IAAI,2CAA2C;yBAC5D;qBACF;iBACF,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,uCAAuC;gBACvC,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,iCAAiC,MAAM,CAAC,QAAQ,KAAK,MAAM,EAAE;yBACpE;qBACF;oBACD,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5E,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,iCAAiC,YAAY,EAAE;qBACtD;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/filesystem.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Filesystem Tools
+ *
+ * MCP tools for file system operations in the Heimdall workspace
+ */
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { PyodideManager } from "../core/pyodide-manager.js";
+/**
+ * Register filesystem tools with the MCP server
+ */
+export declare function registerFilesystemTools(server: McpServer, pyodideManager: PyodideManager): void;
+//# sourceMappingURL=filesystem.d.ts.map

package/dist/tools/filesystem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filesystem.d.ts","sourceRoot":"","sources":["../../src/tools/filesystem.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAEjE;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,QAmHxF"}

package/dist/tools/filesystem.js

@@ -0,0 +1,104 @@
+/**
+ * Filesystem Tools
+ *
+ * MCP tools for file system operations in the Heimdall workspace
+ */
+import { z } from "zod";
+/**
+ * Register filesystem tools with the MCP server
+ */
+export function registerFilesystemTools(server, pyodideManager) {
+    // Write file
+    server.registerTool("write_file", {
+        title: "Write File",
+        description: `Write content to a file in the Heimdall workspace.
+
+Creates parent directories automatically. Files persist between executions.`,
+        inputSchema: {
+            path: z.string().describe("File path relative to workspace"),
+            content: z.string().describe("Content to write"),
+        },
+    }, async ({ path: filePath, content }) => {
+        const result = await pyodideManager.writeFile(filePath, content);
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: result.success ? `✓ Written to ${filePath}` : `✗ Error: ${result.error}`,
+                },
+            ],
+            structuredContent: result,
+        };
+    });
+    // Read file
+    server.registerTool("read_file", {
+        title: "Read File",
+        description: "Read content from a file in the Heimdall workspace.",
+        inputSchema: {
+            path: z.string().describe("File path relative to workspace"),
+        },
+    }, async ({ path: filePath }) => {
+        const result = await pyodideManager.readFile(filePath);
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: result.success ? result.content : `Error: ${result.error}`,
+                },
+            ],
+            structuredContent: result,
+        };
+    });
+    // List files
+    server.registerTool("list_files", {
+        title: "List Files",
+        description: "List files and directories in the Heimdall workspace.",
+        inputSchema: {
+            path: z.string().optional().describe("Directory path (empty for workspace root)"),
+        },
+    }, async ({ path: dirPath }) => {
+        const result = await pyodideManager.listFiles(dirPath || "");
+        let text;
+        if (result.success) {
+            if (result.files.length === 0) {
+                text = "Directory is empty";
+            }
+            else {
+                text = result.files
+                    .map((f) => {
+                    const icon = f.isDirectory ? "📁" : "📄";
+                    const size = f.isDirectory ? "" : ` (${f.size} bytes)`;
+                    return `${icon} ${f.name}${size}`;
+                })
+                    .join("\n");
+            }
+        }
+        else {
+            text = `Error: ${result.error}`;
+        }
+        return {
+            content: [{ type: "text", text }],
+            structuredContent: result,
+        };
+    });
+    // Delete file
+    server.registerTool("delete_file", {
+        title: "Delete File",
+        description: "Delete a file or empty directory from the Heimdall workspace.",
+        inputSchema: {
+            path: z.string().describe("File or directory path"),
+        },
+    }, async ({ path: filePath }) => {
+        const result = await pyodideManager.deleteFile(filePath);
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: result.success ? `✓ Deleted ${filePath}` : `✗ Error: ${result.error}`,
+                },
+            ],
+            structuredContent: result,
+        };
+    });
+}
+//# sourceMappingURL=filesystem.js.map

package/dist/tools/filesystem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filesystem.js","sourceRoot":"","sources":["../../src/tools/filesystem.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAiB,EAAE,cAA8B;IACvF,aAAa;IACb,MAAM,CAAC,YAAY,CACjB,YAAY,EACZ;QACE,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE;;4EAEyD;QACtE,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;YAC5D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;SACjD;KACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE;QACpC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAEjE,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,QAAQ,EAAE,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,KAAK,EAAE;iBAC/E;aACF;YACD,iBAAiB,EAAE,MAAM;SAC1B,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,YAAY;IACZ,MAAM,CAAC,YAAY,CACjB,WAAW,EACX;QACE,KAAK,EAAE,WAAW;QAClB,WAAW,EAAE,qDAAqD;QAClE,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;SAC7D;KACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;QAC3B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAEvD,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAQ,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,KAAK,EAAE;iBAClE;aACF;YACD,iBAAiB,EAAE,MAAM;SAC1B,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,aAAa;IACb,MAAM,CAAC,YAAY,CACjB,YAAY,EACZ;QACE,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,uDAAuD;QACpE,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;SAClF;KACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;QAC1B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAE7D,IAAI,IAAY,CAAC;QACjB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC9B,IAAI,GAAG,oBAAoB,CAAC;YAC9B,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,MAAM,CAAC,KAAK;qBAChB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;oBACT,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;oBACzC,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC;oBACvD,OAAO,GAAG,IAAI,IAAI,CAAC,CAAC,IAAI,GAAG,IAAI,EAAE,CAAC;gBACpC,CAAC,CAAC;qBACD,IAAI,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,UAAU,MAAM,CAAC,KAAK,EAAE,CAAC;QAClC,CAAC;QAED,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACjC,iBAAiB,EAAE,MAAM;SAC1B,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,cAAc;IACd,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,KAAK,EAAE,aAAa;QACpB,WAAW,EAAE,+DAA+D;QAC5E,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;SACpD;KACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;QAC3B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAEzD,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,QAAQ,EAAE,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,KAAK,EAAE;iBAC5E;aACF;YACD,iBAAiB,EAAE,MAAM;SAC1B,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Tools Registration
+ *
+ * Central module for registering all MCP tools
+ */
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { PyodideManager } from "../core/pyodide-manager.js";
+import type { BashManager } from "../core/bash-manager.js";
+/**
+ * Register all tools with the MCP server
+ */
+export declare function registerAllTools(server: McpServer, pyodideManager: PyodideManager, bashManager: BashManager): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/tools/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAK3D;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,SAAS,EACjB,cAAc,EAAE,cAAc,EAC9B,WAAW,EAAE,WAAW,GACvB,IAAI,CAIN"}

package/dist/tools/index.js

@@ -0,0 +1,17 @@
+/**
+ * Tools Registration
+ *
+ * Central module for registering all MCP tools
+ */
+import { registerPythonExecutionTools } from "./python-execution.js";
+import { registerFilesystemTools } from "./filesystem.js";
+import { registerBashExecutionTools } from "./bash-execution.js";
+/**
+ * Register all tools with the MCP server
+ */
+export function registerAllTools(server, pyodideManager, bashManager) {
+    registerPythonExecutionTools(server, pyodideManager);
+    registerFilesystemTools(server, pyodideManager);
+    registerBashExecutionTools(server, bashManager, pyodideManager);
+}
+//# sourceMappingURL=index.js.map

package/dist/tools/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAEjE;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAiB,EACjB,cAA8B,EAC9B,WAAwB;IAExB,4BAA4B,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACrD,uBAAuB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAChD,0BAA0B,CAAC,MAAM,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;AAClE,CAAC"}

package/dist/tools/python-execution.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Python Execution Tools
+ *
+ * MCP tools for executing Python code and installing packages
+ */
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { PyodideManager } from "../core/pyodide-manager.js";
+/**
+ * Register Python execution tools with the MCP server
+ */
+export declare function registerPythonExecutionTools(server: McpServer, pyodideManager: PyodideManager): void;
+//# sourceMappingURL=python-execution.d.ts.map

package/dist/tools/python-execution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"python-execution.d.ts","sourceRoot":"","sources":["../../src/tools/python-execution.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAEjE;;GAEG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,cAAc,QA6E7F"}

package/dist/tools/python-execution.js

@@ -0,0 +1,77 @@
+/**
+ * Python Execution Tools
+ *
+ * MCP tools for executing Python code and installing packages
+ */
+import { z } from "zod";
+/**
+ * Register Python execution tools with the MCP server
+ */
+export function registerPythonExecutionTools(server, pyodideManager) {
+    // Execute Python code
+    server.registerTool("execute_python", {
+        title: "Execute Python",
+        description: `Execute Python code in the Heimdall environment (Pyodide sandbox).
+
+The code runs in an isolated WebAssembly sandbox with:
+- Access to /workspace directory for file I/O
+- Standard library and auto-loaded packages
+- stdout/stderr capture for output
+- NO network access (WebAssembly security boundary)
+- Execution time limits to prevent long-running scripts
+
+Returns execution results including output and any errors.`,
+        inputSchema: {
+            code: z.string().describe("Python code to execute"),
+            packages: z
+                .array(z.string())
+                .optional()
+                .describe("Optional additional packages to install (most are auto-detected from imports)"),
+        },
+    }, async ({ code, packages }) => {
+        const result = await pyodideManager.executeCode(code, packages || []);
+        const output = {
+            success: result.success,
+            stdout: result.stdout,
+            stderr: result.stderr,
+            result: result.result,
+            error: result.error,
+        };
+        let text = "";
+        if (result.stdout)
+            text += `Output:\n${result.stdout}\n`;
+        if (result.stderr)
+            text += `Stderr:\n${result.stderr}\n`;
+        if (result.result)
+            text += `Result: ${result.result}\n`;
+        if (result.error)
+            text += `Error:\n${result.error}\n`;
+        if (!text)
+            text = "Code executed successfully (no output)";
+        return {
+            content: [{ type: "text", text }],
+            structuredContent: output,
+        };
+    });
+    // Install packages
+    server.registerTool("install_packages", {
+        title: "Install Packages",
+        description: `Install Python packages via micropip.
+
+Note: Only pure Python packages or packages with WebAssembly wheels are supported.
+Common data science packages like numpy, pandas, scipy are available.`,
+        inputSchema: {
+            packages: z.array(z.string()).describe("List of package names to install"),
+        },
+    }, async ({ packages }) => {
+        const results = await pyodideManager.installPackages(packages);
+        const text = results
+            .map((r) => `${r.package}: ${r.success ? "✓ installed" : `✗ ${r.error}`}`)
+            .join("\n");
+        return {
+            content: [{ type: "text", text }],
+            structuredContent: { results },
+        };
+    });
+}
+//# sourceMappingURL=python-execution.js.map

package/dist/tools/python-execution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"python-execution.js","sourceRoot":"","sources":["../../src/tools/python-execution.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;GAEG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAAiB,EAAE,cAA8B;IAC5F,sBAAsB;IACtB,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,KAAK,EAAE,gBAAgB;QACvB,WAAW,EAAE;;;;;;;;;2DASwC;QACrD,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;YACnD,QAAQ,EAAE,CAAC;iBACR,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;iBACjB,QAAQ,EAAE;iBACV,QAAQ,CACP,+EAA+E,CAChF;SACJ;KACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;QAC3B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;QAEtE,MAAM,MAAM,GAAG;YACb,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,KAAK,EAAE,MAAM,CAAC,KAAK;SACpB,CAAC;QAEF,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,MAAM,CAAC,MAAM;YAAE,IAAI,IAAI,YAAY,MAAM,CAAC,MAAM,IAAI,CAAC;QACzD,IAAI,MAAM,CAAC,MAAM;YAAE,IAAI,IAAI,YAAY,MAAM,CAAC,MAAM,IAAI,CAAC;QACzD,IAAI,MAAM,CAAC,MAAM;YAAE,IAAI,IAAI,WAAW,MAAM,CAAC,MAAM,IAAI,CAAC;QACxD,IAAI,MAAM,CAAC,KAAK;YAAE,IAAI,IAAI,WAAW,MAAM,CAAC,KAAK,IAAI,CAAC;QACtD,IAAI,CAAC,IAAI;YAAE,IAAI,GAAG,wCAAwC,CAAC;QAE3D,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACjC,iBAAiB,EAAE,MAAM;SAC1B,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,mBAAmB;IACnB,MAAM,CAAC,YAAY,CACjB,kBAAkB,EAClB;QACE,KAAK,EAAE,kBAAkB;QACzB,WAAW,EAAE;;;sEAGmD;QAChE,WAAW,EAAE;YACX,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,kCAAkC,CAAC;SAC3E;KACF,EACD,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;QACrB,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAE/D,MAAM,IAAI,GAAG,OAAO;aACjB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;aACzE,IAAI,CAAC,IAAI,CAAC,CAAC;QAEd,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACjC,iBAAiB,EAAE,EAAE,OAAO,EAAE;SAC/B,CAAC;IACJ,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/types/index.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Base interface with index signature for MCP SDK compatibility
+ */
+interface BaseResult {
+    [x: string]: unknown;
+}
+/**
+ * Result from executing Python code
+ */
+export interface ExecutionResult extends BaseResult {
+    success: boolean;
+    stdout: string;
+    stderr: string;
+    result: string | null;
+    error: string | null;
+}
+/**
+ * Result from reading a file
+ */
+export interface FileReadResult extends BaseResult {
+    success: boolean;
+    content: string | null;
+    error: string | null;
+}
+/**
+ * Result from writing a file
+ */
+export interface FileWriteResult extends BaseResult {
+    success: boolean;
+    error: string | null;
+}
+/**
+ * Result from installing packages
+ */
+export interface PackageInstallResult extends BaseResult {
+    package: string;
+    success: boolean;
+    error: string | null;
+}
+/**
+ * File information
+ */
+export interface FileInfo extends BaseResult {
+    name: string;
+    isDirectory: boolean;
+    size: number;
+}
+/**
+ * Result from listing files
+ */
+export interface FileListResult extends BaseResult {
+    success: boolean;
+    files: FileInfo[];
+    error: string | null;
+}
+/**
+ * Result from deleting a file
+ */
+export interface FileDeleteResult extends BaseResult {
+    success: boolean;
+    error: string | null;
+}
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,UAAU,UAAU;IAClB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,eAAgB,SAAQ,UAAU;IACjD,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,cAAe,SAAQ,UAAU;IAChD,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,eAAgB,SAAQ,UAAU;IACjD,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAqB,SAAQ,UAAU;IACtD,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,QAAS,SAAQ,UAAU;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,OAAO,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,cAAe,SAAQ,UAAU;IAChD,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAiB,SAAQ,UAAU;IAClD,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB"}

package/dist/types/index.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.js.map

package/dist/types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":""}

package/dist/utils/async-lock.d.ts

@@ -0,0 +1,35 @@
+/**
+ * AsyncLock - A simple async mutex/lock implementation
+ *
+ * Provides mutual exclusion for async operations, preventing race conditions
+ * in concurrent code. Used to protect critical sections like file writes
+ * where TOCTOU (time-of-check to time-of-use) vulnerabilities could occur.
+ *
+ * @example
+ * ```typescript
+ * const lock = new AsyncLock();
+ *
+ * // Multiple concurrent calls will be serialized
+ * await lock.acquire('write', async () => {
+ *   await checkSize();
+ *   await writeFile();
+ * });
+ * ```
+ */
+export declare class AsyncLock {
+    private locks;
+    /**
+     * Acquire a lock for the given key, execute the function, then release.
+     * If another operation holds the lock, this will wait until it's released.
+     *
+     * @param key - The lock key (allows multiple independent locks)
+     * @param fn - The async function to execute while holding the lock
+     * @returns The result of the function
+     */
+    acquire<T>(key: string, fn: () => Promise<T>): Promise<T>;
+    /**
+     * Check if a lock is currently held for the given key
+     */
+    isLocked(key: string): boolean;
+}
+//# sourceMappingURL=async-lock.d.ts.map

package/dist/utils/async-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"async-lock.d.ts","sourceRoot":"","sources":["../../src/utils/async-lock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,KAAK,CAAyC;IAEtD;;;;;;;OAOG;IACG,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAwB/D;;OAEG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;CAG/B"}

package/dist/utils/async-lock.js

@@ -0,0 +1,57 @@
+/**
+ * AsyncLock - A simple async mutex/lock implementation
+ *
+ * Provides mutual exclusion for async operations, preventing race conditions
+ * in concurrent code. Used to protect critical sections like file writes
+ * where TOCTOU (time-of-check to time-of-use) vulnerabilities could occur.
+ *
+ * @example
+ * ```typescript
+ * const lock = new AsyncLock();
+ *
+ * // Multiple concurrent calls will be serialized
+ * await lock.acquire('write', async () => {
+ *   await checkSize();
+ *   await writeFile();
+ * });
+ * ```
+ */
+export class AsyncLock {
+    locks = new Map();
+    /**
+     * Acquire a lock for the given key, execute the function, then release.
+     * If another operation holds the lock, this will wait until it's released.
+     *
+     * @param key - The lock key (allows multiple independent locks)
+     * @param fn - The async function to execute while holding the lock
+     * @returns The result of the function
+     */
+    async acquire(key, fn) {
+        // Wait for any existing lock on this key
+        while (this.locks.has(key)) {
+            await this.locks.get(key);
+        }
+        // Create a new lock promise
+        let releaseLock;
+        const lockPromise = new Promise((resolve) => {
+            releaseLock = resolve;
+        });
+        this.locks.set(key, lockPromise);
+        try {
+            // Execute the protected function
+            return await fn();
+        }
+        finally {
+            // Release the lock
+            this.locks.delete(key);
+            releaseLock();
+        }
+    }
+    /**
+     * Check if a lock is currently held for the given key
+     */
+    isLocked(key) {
+        return this.locks.has(key);
+    }
+}
+//# sourceMappingURL=async-lock.js.map