@llm4ts/shell 2.45.0 → 2.47.0

package/dist/OperatorServer.js

@@ -0,0 +1,123 @@
+import { timingSafeEqual } from "node:crypto";
+import { createServer } from "node:http";
+import * as NodeHttpServer from "@effect/platform-node/NodeHttpServer";
+import * as NodeStdio from "@effect/platform-node/NodeStdio";
+import * as Clock from "effect/Clock";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import * as Logger from "effect/Logger";
+import * as Option from "effect/Option";
+import * as Schema from "effect/Schema";
+import * as McpProtocol from "effect/ai/McpProtocol";
+import * as McpServer from "effect/ai/McpServer";
+import * as Toolkit from "effect/ai/Toolkit";
+import * as HttpRouter from "effect/http/HttpRouter";
+import * as HttpServerRequest from "effect/http/HttpServerRequest";
+import * as HttpServerResponse from "effect/http/HttpServerResponse";
+import { actHandlers, actToolkit, approveTool, retroStartTool, startRunTool, stopRunTool, waitHandlers, waitToolkit } from "./OperatorActTools.js";
+import { readHandlers, readToolkit } from "./OperatorTools.js";
+import { packageVersion } from "./Package.js";
+/**
+ * The operator MCP server (`llm4ts mcp`, ADR 0041): the read, wait and allowed
+ * act tools served over stdio, or over HTTP at `/mcp` behind a bearer token.
+ * A tool that the configuration does not allow is never registered, so it is
+ * absent from `tools/list` rather than refused when called.
+ */
+export const serverName = "llm4ts";
+export const serverPath = "/mcp";
+const serverInfo = {
+    name: serverName,
+    version: packageVersion,
+    protocols: [McpProtocol.v2025_06_18]
+};
+const runToolkit = Toolkit.make(startRunTool, stopRunTool, retroStartTool);
+const approveToolkit = Toolkit.make(approveTool);
+/** The act tools a configuration allows: `--allow-run` and `--allow-approve` each add their own. */
+export const actToolkitFor = (config) => config.allowRun
+    ? config.allowApprove
+        ? actToolkit
+        : runToolkit
+    : config.allowApprove
+        ? approveToolkit
+        : Toolkit.empty;
+const actLayer = (config, deps) => {
+    const act = actHandlers(deps);
+    if (config.allowRun && config.allowApprove) {
+        return McpServer.toolkit(actToolkit).pipe(Layer.provide(actToolkit.toLayer(act)));
+    }
+    if (config.allowRun) {
+        const handlers = runToolkit.of({
+            start_run: act.start_run,
+            stop_run: act.stop_run,
+            retro_start: act.retro_start
+        });
+        return McpServer.toolkit(runToolkit).pipe(Layer.provide(runToolkit.toLayer(handlers)));
+    }
+    if (config.allowApprove) {
+        const handlers = approveToolkit.of({ approve: act.approve });
+        return McpServer.toolkit(approveToolkit).pipe(Layer.provide(approveToolkit.toLayer(handlers)));
+    }
+    return Layer.empty;
+};
+/** Every tool this configuration serves, registered on the server it is provided. */
+export const toolLayer = (config, deps) => Layer.mergeAll(McpServer.toolkit(readToolkit).pipe(Layer.provide(readToolkit.toLayer(readHandlers(deps)))), McpServer.toolkit(waitToolkit).pipe(Layer.provide(waitToolkit.toLayer(waitHandlers(deps)))), actLayer(config, deps));
+const unauthorized = HttpServerResponse.empty({ status: 401 });
+/**
+ * Lets a request through only with `Authorization: Bearer <token>`, compared in
+ * constant time; anything else is a bare 401. The token is never logged.
+ */
+export const bearerMiddleware = (token) => {
+    const expected = Buffer.from(`Bearer ${token}`, "utf8");
+    const matches = (header) => {
+        if (header === undefined)
+            return false;
+        const actual = Buffer.from(header, "utf8");
+        return actual.length === expected.length && timingSafeEqual(actual, expected);
+    };
+    return HttpRouter.middleware((httpEffect) => Effect.gen(function* () {
+        const request = yield* HttpServerRequest.HttpServerRequest;
+        return matches(request.headers.authorization) ? yield* httpEffect : unauthorized;
+    })).layer;
+};
+/** The HTTP application: the tools on an MCP endpoint at `/mcp`, behind the bearer token. */
+export const httpAppLayer = (config, deps) => toolLayer(config, deps).pipe(Layer.provide(McpServer.layerHttp({ ...serverInfo, path: serverPath })), Layer.provide(bearerMiddleware(config.transport.token)));
+const RpcCall = Schema.Struct({
+    method: Schema.String,
+    params: Schema.optional(Schema.Struct({ name: Schema.optional(Schema.String) }))
+});
+const decodeRpcCall = Schema.decodeUnknownOption(Schema.fromJsonString(RpcCall));
+/** What a request asked for: its JSON-RPC method and, for `tools/call`, the tool. Never its arguments. */
+const requestLabel = (body) => Option.match(decodeRpcCall(body), {
+    onNone: () => "request",
+    onSome: (call) => call.method === "tools/call" && call.params?.name !== undefined
+        ? `tools/call ${call.params.name}`
+        : call.method
+});
+/**
+ * One log line per HTTP request: method, tool, duration and status. The body
+ * is read only after the endpoint has read it (the read is cached), and never
+ * for a request the token check turned away.
+ */
+const requestLog = HttpRouter.middleware((httpEffect) => Effect.gen(function* () {
+    const request = yield* HttpServerRequest.HttpServerRequest;
+    const startedAt = yield* Clock.currentTimeMillis;
+    const response = yield* httpEffect;
+    const elapsed = (yield* Clock.currentTimeMillis) - startedAt;
+    const label = response.status === 401 || request.method !== "POST"
+        ? request.method
+        : yield* request.text.pipe(Effect.map(requestLabel), Effect.orElseSucceed(() => "request"));
+    yield* Effect.logInfo(`mcp ${label} ${elapsed}ms status=${response.status}`);
+    return response;
+}), { global: true });
+/** Serves the operator tools on the configured transport until interrupted. */
+export const runOperatorServer = (config, deps) => {
+    const transport = config.transport;
+    if (transport._tag === "stdio") {
+        // stdout carries the protocol: every log line goes to stderr.
+        return Layer.launch(toolLayer(config, deps).pipe(Layer.provide(McpServer.layerStdio(serverInfo)), Layer.provide(NodeStdio.layer))).pipe(Effect.provideService(Logger.LogToStderr, true));
+    }
+    return Layer.launch(HttpRouter.serve(Layer.merge(httpAppLayer({ ...config, transport }, deps), requestLog), {
+        disableLogger: true
+    }).pipe(Layer.provide(NodeHttpServer.layer(createServer, { host: transport.host, port: transport.port }))));
+};
+//# sourceMappingURL=OperatorServer.js.map

package/dist/OperatorServer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OperatorServer.js","sourceRoot":"","sources":["../src/OperatorServer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AACxC,OAAO,KAAK,cAAc,MAAM,sCAAsC,CAAA;AACtE,OAAO,KAAK,SAAS,MAAM,iCAAiC,CAAA;AAE5D,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AACrC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AACrC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,WAAW,MAAM,uBAAuB,CAAA;AACpD,OAAO,KAAK,SAAS,MAAM,qBAAqB,CAAA;AAChD,OAAO,KAAK,OAAO,MAAM,mBAAmB,CAAA;AAC5C,OAAO,KAAK,UAAU,MAAM,wBAAwB,CAAA;AAEpD,OAAO,KAAK,iBAAiB,MAAM,+BAA+B,CAAA;AAClE,OAAO,KAAK,kBAAkB,MAAM,gCAAgC,CAAA;AACpE,OAAO,EACL,WAAW,EACX,UAAU,EACV,WAAW,EACX,cAAc,EACd,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,WAAW,EACZ,MAAM,uBAAuB,CAAA;AAE9B,OAAO,EAAE,YAAY,EAAE,WAAW,EAAqB,MAAM,oBAAoB,CAAA;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAE7C;;;;;GAKG;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG,QAAQ,CAAA;AAClC,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAA;AAKhC,MAAM,UAAU,GAAG;IACjB,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,cAAc;IACvB,SAAS,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC;CAC5B,CAAA;AAEV,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,cAAc,CAAC,CAAA;AAC1E,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;AAEhD,oGAAoG;AACpG,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAAsB,EAAE,EAAE,CACtD,MAAM,CAAC,QAAQ;IACb,CAAC,CAAC,MAAM,CAAC,YAAY;QACnB,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,UAAU;IACd,CAAC,CAAC,MAAM,CAAC,YAAY;QACnB,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAA;AAErB,MAAM,QAAQ,GAAG,CAAC,MAAsB,EAAE,IAAkB,EAAsB,EAAE;IAClF,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,CAAA;IAC7B,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QAC3C,OAAO,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IACnF,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,UAAU,CAAC,EAAE,CAAC;YAC7B,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,WAAW,EAAE,GAAG,CAAC,WAAW;SAC7B,CAAC,CAAA;QACF,OAAO,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;IACxF,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,cAAc,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;QAC5D,OAAO,SAAS,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;IAChG,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAA;AACpB,CAAC,CAAA;AAED,qFAAqF;AACrF,MAAM,CAAC,MAAM,SAAS,GAAG,CACvB,MAAsB,EACtB,IAAkB,EAC8B,EAAE,CAClD,KAAK,CAAC,QAAQ,CACZ,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAC3F,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAC3F,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CACvB,CAAA;AAEH,MAAM,YAAY,GAAG,kBAAkB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;AAE9D;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAa,EAAsB,EAAE;IACpE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,EAAE,EAAE,MAAM,CAAC,CAAA;IACvD,MAAM,OAAO,GAAG,CAAC,MAA0B,EAAW,EAAE;QACtD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,KAAK,CAAA;QACtC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC1C,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IAC/E,CAAC,CAAA;IACD,OAAO,UAAU,CAAC,UAAU,CAAC,CAAC,UAAU,EAAE,EAAE,CAC1C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,iBAAiB,CAAA;QAC1D,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAA;IAClF,CAAC,CAAC,CACH,CAAC,KAAK,CAAA;AACT,CAAC,CAAA;AAED,6FAA6F;AAC7F,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,MAA0B,EAC1B,IAAkB,EACqD,EAAE,CACzE,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAC1B,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,GAAG,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,EACvE,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CACxD,CAAA;AAEH,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;CACjF,CAAC,CAAA;AACF,MAAM,aAAa,GAAG,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAA;AAEhF,0GAA0G;AAC1G,MAAM,YAAY,GAAG,CAAC,IAAY,EAAU,EAAE,CAC5C,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE;IAChC,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS;IACvB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,IAAI,CAAC,MAAM,KAAK,YAAY,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,KAAK,SAAS;QAC7D,CAAC,CAAC,cAAc,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;QAClC,CAAC,CAAC,IAAI,CAAC,MAAM;CAClB,CAAC,CAAA;AAEJ;;;;GAIG;AACH,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CACtC,CAAC,UAAU,EAAE,EAAE,CACb,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,iBAAiB,CAAA;IAC1D,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAA;IAChD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,UAAU,CAAA;IAClC,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAA;IAC5D,MAAM,KAAK,GACT,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;QAClD,CAAC,CAAC,OAAO,CAAC,MAAM;QAChB,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CACtB,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,EACxB,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CACtC,CAAA;IACP,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,KAAK,IAAI,OAAO,aAAa,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;IAC5E,OAAO,QAAQ,CAAA;AACjB,CAAC,CAAC,EACJ,EAAE,MAAM,EAAE,IAAI,EAAE,CACjB,CAAA;AAED,+EAA+E;AAC/E,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,MAAsB,EACtB,IAAkB,EAC6C,EAAE;IACjE,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAA;IAClC,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC/B,8DAA8D;QAC9D,OAAO,KAAK,CAAC,MAAM,CACjB,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAC1B,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,EAC/C,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAC/B,CACF,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAA;IACzD,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CACjB,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,EAAE,IAAI,CAAC,EAAE,UAAU,CAAC,EAAE;QACtF,aAAa,EAAE,IAAI;KACpB,CAAC,CAAC,IAAI,CACL,KAAK,CAAC,OAAO,CACX,cAAc,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,CACnF,CACF,CACF,CAAA;AACH,CAAC,CAAA"}