@jingyi0605/codingns4dsh 0.2.1-rc.5 → 0.2.1-rc.7

package/data/build/dist/host/workspace-mcp/api-key-store.d.ts

@@ -0,0 +1,16 @@
+export interface WorkspaceMcpApiKeyStore {
+    read(): Promise<string | null>;
+    write(key: string): Promise<void>;
+    clear(): Promise<void>;
+}
+/** Stores the bearer key outside client-readable settings with owner-only file permissions. */
+export declare class FileWorkspaceMcpApiKeyStore implements WorkspaceMcpApiKeyStore {
+    private readonly filePath;
+    constructor(filePath?: string);
+    read(): Promise<string | null>;
+    write(key: string): Promise<void>;
+    clear(): Promise<void>;
+}
+export declare function generateWorkspaceMcpApiKey(): string;
+export declare function isWorkspaceMcpApiKey(value: unknown): value is string;
+//# sourceMappingURL=api-key-store.d.ts.map

package/data/build/dist/host/workspace-mcp/api-key-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key-store.d.ts","sourceRoot":"","sources":["../../../../../src/host/workspace-mcp/api-key-store.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,uBAAuB;IACtC,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IAC9B,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACvB;AAED,+FAA+F;AAC/F,qBAAa,2BAA4B,YAAW,uBAAuB;IAC7D,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,SAAsB;IAErD,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAU9B,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYjC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAO7B;AAED,wBAAgB,0BAA0B,IAAI,MAAM,CAEnD;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAEpE"}

package/data/build/dist/host/workspace-mcp/api-key-store.js

@@ -0,0 +1,65 @@
+import { randomBytes, randomUUID } from 'node:crypto';
+import { mkdir, readFile, rename, unlink, writeFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+/** Stores the bearer key outside client-readable settings with owner-only file permissions. */
+export class FileWorkspaceMcpApiKeyStore {
+    filePath;
+    constructor(filePath = defaultApiKeyPath()) {
+        this.filePath = filePath;
+    }
+    async read() {
+        try {
+            const key = (await readFile(this.filePath, 'utf8')).trim();
+            return isWorkspaceMcpApiKey(key) ? key : null;
+        }
+        catch (error) {
+            if (isNodeError(error, 'ENOENT'))
+                return null;
+            throw error;
+        }
+    }
+    async write(key) {
+        if (!isWorkspaceMcpApiKey(key))
+            throw new TypeError('Invalid Workspace MCP API key');
+        await mkdir(dirname(this.filePath), { recursive: true, mode: 0o700 });
+        const temporary = `${this.filePath}.${process.pid}.${randomUUID()}.tmp`;
+        try {
+            await writeFile(temporary, `${key}\n`, { encoding: 'utf8', flag: 'wx', mode: 0o600 });
+            await rename(temporary, this.filePath);
+        }
+        finally {
+            try {
+                await unlink(temporary);
+            }
+            catch (error) {
+                if (!isNodeError(error, 'ENOENT'))
+                    throw error;
+            }
+        }
+    }
+    async clear() {
+        try {
+            await (await import('node:fs/promises')).unlink(this.filePath);
+        }
+        catch (error) {
+            if (!isNodeError(error, 'ENOENT'))
+                throw error;
+        }
+    }
+}
+export function generateWorkspaceMcpApiKey() {
+    return randomBytes(32).toString('base64url');
+}
+export function isWorkspaceMcpApiKey(value) {
+    return typeof value === 'string' && /^[A-Za-z0-9_-]{43}$/u.test(value);
+}
+function defaultApiKeyPath() {
+    const configured = process.env.CODINGNS4DSH_STATE_DIR?.trim();
+    const stateDirectory = configured || join(homedir(), '.config', 'codingns4dsh');
+    return join(stateDirectory, 'workspace-mcp-api-key');
+}
+function isNodeError(error, code) {
+    return error instanceof Error && 'code' in error && error.code === code;
+}
+//# sourceMappingURL=api-key-store.js.map

package/data/build/dist/host/workspace-mcp/api-key-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key-store.js","sourceRoot":"","sources":["../../../../../src/host/workspace-mcp/api-key-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAQzC,+FAA+F;AAC/F,MAAM,OAAO,2BAA2B;IACT;IAA7B,YAA6B,WAAW,iBAAiB,EAAE;QAA9B,aAAQ,GAAR,QAAQ,CAAsB;IAAG,CAAC;IAE/D,KAAK,CAAC,IAAI;QACR,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;YAC1D,OAAO,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAA;YAC7C,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAW;QACrB,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAA;QACpF,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACrE,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAA;QACvE,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,GAAG,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YACrF,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;QACxC,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAAA;YAAC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC;oBAAE,MAAM,KAAK,CAAA;YAAC,CAAC;QAClG,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC;YACH,MAAM,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAAE,MAAM,KAAK,CAAA;QAChD,CAAC;IACH,CAAC;CACF;AAED,MAAM,UAAU,0BAA0B;IACxC,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AAC9C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AACxE,CAAC;AAED,SAAS,iBAAiB;IACxB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,CAAA;IAC7D,MAAM,cAAc,GAAG,UAAU,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,CAAC,CAAA;IAC/E,OAAO,IAAI,CAAC,cAAc,EAAE,uBAAuB,CAAC,CAAA;AACtD,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,IAAY;IAC/C,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAK,KAA4B,CAAC,IAAI,KAAK,IAAI,CAAA;AACjG,CAAC"}

package/data/build/dist/host/workspace-mcp/tools.d.ts

@@ -0,0 +1,54 @@
+import type { CodingNsHostServices } from '../features/types.js';
+import type { WorkspaceMcpTool } from './transport.js';
+import type { WorkspaceApprovalAdapter } from '../../dsh-capabilities/host/workspace-approval-adapter.js';
+import type { WorkspacePendingQuestionsAdapter } from '../../dsh-capabilities/host/workspace-pending-questions-adapter.js';
+import type { WorkspaceSessionControlAdapter } from '../../dsh-capabilities/host/workspace-session-control-adapter.js';
+/**
+ * Fixed public contracts for local workspace/session/terminal control.
+ * Authentication and local full-workspace access are enforced by the transport;
+ * every resource identifier is still validated and rechecked by its handler.
+ * Workspace filesystem roots are never returned in tool results.
+ */
+export declare const WORKSPACE_MCP_TOOL_DEFINITIONS: readonly [WorkspaceMcpTool, WorkspaceMcpTool, WorkspaceMcpTool, WorkspaceMcpTool, WorkspaceMcpTool, WorkspaceMcpTool, WorkspaceMcpTool, WorkspaceMcpTool, WorkspaceMcpTool, WorkspaceMcpTool, WorkspaceMcpTool];
+export interface WorkspaceMcpToolHandlers {
+    listTools(signal: AbortSignal): readonly WorkspaceMcpTool[];
+    /** Dispatch one tool returned by WORKSPACE_MCP_TOOL_DEFINITIONS. */
+    callTool(name: string, args: Readonly<Record<string, unknown>>, signal: AbortSignal): Promise<unknown>;
+    /** Abort operations owned by this factory. */
+    dispose(): Promise<void>;
+    /** Cancel approval requests issued from an active DSH turn. */
+    abortRequests(): void;
+}
+export interface WorkspaceMcpAdapterRegistry {
+    catalogForUse(ids: readonly string[]): Promise<readonly {
+        readonly id: string;
+        readonly enabled: boolean;
+        readonly installed: boolean;
+    }[]>;
+    models(adapterId: string): Promise<unknown>;
+    setSession(sessionId: string, config: {
+        readonly adapterId: string;
+        readonly modelId?: string;
+    }, options?: {
+        readonly rememberPreference?: boolean;
+        readonly inheritSelection?: boolean;
+    }): unknown;
+    getSession(sessionId: string): {
+        readonly adapterId: string;
+        readonly modelId?: string;
+    };
+    flushSessionBindings(): Promise<void>;
+}
+/** Create an isolated tool dispatcher over existing Host services. */
+export declare function createWorkspaceMcpToolHandlers(services: CodingNsHostServices, adapters?: {
+    readonly sessionControl?: WorkspaceSessionControlAdapter;
+    readonly pendingQuestions?: WorkspacePendingQuestionsAdapter;
+    readonly approval?: WorkspaceApprovalAdapter;
+    readonly getAdapterRegistry?: () => WorkspaceMcpAdapterRegistry | undefined;
+    readonly diagnostics?: readonly {
+        readonly capability: string;
+        readonly status: string;
+        readonly message: string;
+    }[];
+}): WorkspaceMcpToolHandlers;
+//# sourceMappingURL=tools.d.ts.map

package/data/build/dist/host/workspace-mcp/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../../../../src/host/workspace-mcp/tools.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAChE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACtD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2DAA2D,CAAA;AACzG,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,oEAAoE,CAAA;AAC1H,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,kEAAkE,CAAA;AAUtH;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B,iNAyEK,CAAA;AAEhD,MAAM,WAAW,wBAAwB;IACvC,SAAS,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,gBAAgB,EAAE,CAAA;IAC3D,oEAAoE;IACpE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACtG,8CAA8C;IAC9C,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACxB,+DAA+D;IAC/D,aAAa,IAAI,IAAI,CAAA;CACtB;AAED,MAAM,WAAW,2BAA2B;IAC1C,aAAa,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC,CAAA;IAC1I,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC3C,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAA;IACnM,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACxF,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACtC;AAED,sEAAsE;AACtE,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,oBAAoB,EAAE,QAAQ,CAAC,EAAE;IACxF,QAAQ,CAAC,cAAc,CAAC,EAAE,8BAA8B,CAAA;IACxD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gCAAgC,CAAA;IAC5D,QAAQ,CAAC,QAAQ,CAAC,EAAE,wBAAwB,CAAA;IAC5C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,2BAA2B,GAAG,SAAS,CAAA;IAC3E,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS;QAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CACrH,GAAG,wBAAwB,CAuD3B"}