@mecha.im/cli 0.3.4

package/dist/src/mcp-proxy.js

@@ -0,0 +1,177 @@
+/**
+ * MCP stdio server — exposes all mecha bots as tools via a single MCP server.
+ *
+ * Usage in .mcp.json:
+ *   { "mecha": { "command": "mecha", "args": ["mcp"] } }
+ *
+ * Tools exposed:
+ *   - query: Send a prompt to any bot by name
+ *   - status: Check a bot's status
+ *   - list: List all available bots
+ */
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { z } from "zod";
+import { getBot } from "./store.js";
+import { resolveHostBotBaseUrl } from "./resolve-endpoint.js";
+import { isValidName } from "../shared/validation.js";
+import * as docker from "./docker.js";
+// Bot name schema — reuses the same validation as CLI
+const botNameSchema = z.string().min(1).max(32)
+    .regex(/^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/, "Invalid bot name (lowercase alphanumeric + hyphens)")
+    .describe("Bot name (e.g. posca, reviewer)");
+/** Read an SSE stream from a bot /prompt response and collect the text */
+async function collectSSEResponse(resp) {
+    const reader = resp.body?.getReader();
+    if (!reader)
+        throw new Error("No response body");
+    const decoder = new TextDecoder();
+    let buffer = "";
+    let text = "";
+    let sessionId;
+    let costUsd;
+    let durationMs;
+    let success = true;
+    let error;
+    while (true) {
+        const { done, value } = await reader.read();
+        if (done)
+            break;
+        buffer += decoder.decode(value, { stream: true });
+        const lines = buffer.split("\n");
+        buffer = lines.pop() ?? "";
+        for (const line of lines) {
+            if (!line.startsWith("data: "))
+                continue;
+            try {
+                const parsed = JSON.parse(line.slice(6));
+                if (parsed.content)
+                    text += parsed.content;
+                if (parsed.message && !parsed.task_id) {
+                    error = parsed.message;
+                    success = false;
+                }
+                if (parsed.cost_usd !== undefined) {
+                    costUsd = parsed.cost_usd;
+                    durationMs = parsed.duration_ms;
+                    sessionId = parsed.session_id;
+                    if (parsed.success === false)
+                        success = false;
+                }
+            }
+            catch { /* non-JSON SSE data */ }
+        }
+    }
+    return { text, sessionId, costUsd, durationMs, success, error };
+}
+function authHeaders(botToken) {
+    const h = { "Content-Type": "application/json" };
+    if (botToken)
+        h["Authorization"] = `Bearer ${botToken}`;
+    return h;
+}
+function mcpError(text) {
+    return { content: [{ type: "text", text }], isError: true };
+}
+export async function startMcpServer() {
+    const server = new McpServer({
+        name: "mecha",
+        version: "0.1.0",
+    });
+    // --- query tool ---
+    server.tool("query", "Send a prompt to a mecha bot and get its response", {
+        bot: botNameSchema,
+        message: z.string().min(1).describe("The prompt message to send"),
+        model: z.string().optional().describe("Override model (sonnet, opus, haiku)"),
+        system: z.string().optional().describe("Override system prompt"),
+        max_turns: z.number().int().min(1).optional().describe("Override max turns"),
+        resume: z.string().min(1).optional().describe("Resume a specific session ID"),
+        effort: z.enum(["low", "medium", "high", "max"]).optional().describe("Thinking effort level"),
+        max_budget_usd: z.number().positive().optional().describe("Max budget in USD"),
+    }, async (args) => {
+        if (!isValidName(args.bot))
+            return mcpError(`Invalid bot name: "${args.bot}"`);
+        const { bot, ...body } = args;
+        const entry = getBot(bot);
+        const resolved = await resolveHostBotBaseUrl(bot);
+        if (!resolved)
+            return mcpError(`Bot "${bot}" not found or not reachable`);
+        try {
+            const resp = await fetch(`${resolved.baseUrl}/prompt`, {
+                method: "POST",
+                headers: authHeaders(entry?.botToken),
+                body: JSON.stringify(body),
+                signal: AbortSignal.timeout(5 * 60 * 1000),
+            });
+            if (resp.status === 409)
+                return mcpError(`Bot "${bot}" is busy processing another request`);
+            if (!resp.ok)
+                return mcpError(`Error from bot: ${resp.status} ${resp.statusText}`);
+            const result = await collectSSEResponse(resp);
+            if (!result.success) {
+                const errText = result.error ?? "Bot run failed";
+                return mcpError(`${errText}${result.text ? `\n\nPartial output:\n${result.text}` : ""}`);
+            }
+            const meta = [
+                result.sessionId && `session: ${result.sessionId}`,
+                result.costUsd !== undefined && `cost: $${result.costUsd.toFixed(4)}`,
+                result.durationMs && `duration: ${result.durationMs}ms`,
+            ].filter(Boolean).join(" | ");
+            return {
+                content: [
+                    { type: "text", text: result.text },
+                    ...(meta ? [{ type: "text", text: `\n---\n${meta}` }] : []),
+                ],
+            };
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            return mcpError(`Network error reaching bot "${bot}": ${msg}`);
+        }
+    });
+    // --- status tool ---
+    server.tool("status", "Check the status of a mecha bot (idle, busy, model, uptime)", {
+        bot: botNameSchema,
+    }, async (args) => {
+        if (!isValidName(args.bot))
+            return mcpError(`Invalid bot name: "${args.bot}"`);
+        const entry = getBot(args.bot);
+        const resolved = await resolveHostBotBaseUrl(args.bot);
+        if (!resolved)
+            return mcpError(`Bot "${args.bot}" not found or not reachable`);
+        try {
+            const resp = await fetch(`${resolved.baseUrl}/api/status`, {
+                headers: authHeaders(entry?.botToken),
+                signal: AbortSignal.timeout(5000),
+            });
+            if (!resp.ok)
+                return mcpError(`Error: ${resp.status} ${resp.statusText}`);
+            const data = await resp.json();
+            return { content: [{ type: "text", text: JSON.stringify(data, null, 2) }] };
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            return mcpError(`Network error reaching bot "${args.bot}": ${msg}`);
+        }
+    });
+    // --- list tool ---
+    server.tool("list", "List all available mecha bots with their status", {}, async () => {
+        try {
+            const bots = await docker.list();
+            if (bots.length === 0) {
+                return { content: [{ type: "text", text: "No bots running. Use `mecha spawn` to create one." }] };
+            }
+            const rows = bots.map((b) => ({
+                name: b.name, status: b.status, model: b.model,
+            }));
+            return { content: [{ type: "text", text: JSON.stringify(rows, null, 2) }] };
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            return mcpError(`Error listing bots: ${msg}`);
+        }
+    });
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+}
+//# sourceMappingURL=mcp-proxy.js.map

package/dist/src/mcp-proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-proxy.js","sourceRoot":"","sources":["../../src/mcp-proxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACpC,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAEtC,sDAAsD;AACtD,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;KAC5C,KAAK,CAAC,iCAAiC,EAAE,qDAAqD,CAAC;KAC/F,QAAQ,CAAC,iCAAiC,CAAC,CAAC;AAE/C,0EAA0E;AAC1E,KAAK,UAAU,kBAAkB,CAAC,IAAc;IAQ9C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;IACtC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAEjD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,SAA6B,CAAC;IAClC,IAAI,OAA2B,CAAC;IAChC,IAAI,UAA8B,CAAC;IACnC,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,IAAI,KAAyB,CAAC;IAE9B,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,IAAI;YAAE,MAAM;QAEhB,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QAE3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,SAAS;YACzC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBACzC,IAAI,MAAM,CAAC,OAAO;oBAAE,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC;gBAC3C,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACtC,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC;oBACvB,OAAO,GAAG,KAAK,CAAC;gBAClB,CAAC;gBACD,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAClC,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC;oBAC1B,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC;oBAChC,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC;oBAC9B,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK;wBAAE,OAAO,GAAG,KAAK,CAAC;gBAChD,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAC,uBAAuB,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,WAAW,CAAC,QAAiB;IACpC,MAAM,CAAC,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;IACzE,IAAI,QAAQ;QAAE,CAAC,CAAC,eAAe,CAAC,GAAG,UAAU,QAAQ,EAAE,CAAC;IACxD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACvE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;IAEH,qBAAqB;IACrB,MAAM,CAAC,IAAI,CACT,OAAO,EACP,mDAAmD,EACnD;QACE,GAAG,EAAE,aAAa;QAClB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QACjE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;QAC7E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QAChE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QAC5E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;QAC7E,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QAC7F,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;KAC/E,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,QAAQ,CAAC,sBAAsB,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;QAE/E,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;QAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ;YAAE,OAAO,QAAQ,CAAC,QAAQ,GAAG,8BAA8B,CAAC,CAAC;QAE1E,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,CAAC,OAAO,SAAS,EAAE;gBACrD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC;gBACrC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;aAC3C,CAAC,CAAC;YAEH,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,QAAQ,CAAC,QAAQ,GAAG,sCAAsC,CAAC,CAAC;YAC5F,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,OAAO,QAAQ,CAAC,mBAAmB,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;YAEnF,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;YAE9C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,IAAI,gBAAgB,CAAC;gBACjD,OAAO,QAAQ,CAAC,GAAG,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAwB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3F,CAAC;YAED,MAAM,IAAI,GAAG;gBACX,MAAM,CAAC,SAAS,IAAI,YAAY,MAAM,CAAC,SAAS,EAAE;gBAClD,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,UAAU,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;gBACrE,MAAM,CAAC,UAAU,IAAI,aAAa,MAAM,CAAC,UAAU,IAAI;aACxD,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAE9B,OAAO;gBACL,OAAO,EAAE;oBACP,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;oBAC5C,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;iBACrE;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,QAAQ,CAAC,+BAA+B,GAAG,MAAM,GAAG,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC,CACF,CAAC;IAEF,sBAAsB;IACtB,MAAM,CAAC,IAAI,CACT,QAAQ,EACR,6DAA6D,EAC7D;QACE,GAAG,EAAE,aAAa;KACnB,EACD,KAAK,EAAE,IAAI,EAAE,EAAE;QACb,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,QAAQ,CAAC,sBAAsB,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;QAE/E,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvD,IAAI,CAAC,QAAQ;YAAE,OAAO,QAAQ,CAAC,QAAQ,IAAI,CAAC,GAAG,8BAA8B,CAAC,CAAC;QAE/E,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,CAAC,OAAO,aAAa,EAAE;gBACzD,OAAO,EAAE,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC;gBACrC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,OAAO,QAAQ,CAAC,UAAU,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;YAE1E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAC/B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACvF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,QAAQ,CAAC,+BAA+B,IAAI,CAAC,GAAG,MAAM,GAAG,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC,CACF,CAAC;IAEF,oBAAoB;IACpB,MAAM,CAAC,IAAI,CACT,MAAM,EACN,iDAAiD,EACjD,EAAE,EACF,KAAK,IAAI,EAAE;QACT,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,mDAAmD,EAAE,CAAC,EAAE,CAAC;YAC7G,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC5B,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK;aAC/C,CAAC,CAAC,CAAC;YAEJ,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACvF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,QAAQ,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC"}

package/dist/src/resolve-endpoint.d.ts

@@ -0,0 +1,13 @@
+export interface EndpointCandidate {
+    baseUrl: string;
+    via: string;
+}
+export declare function listHostBotEndpointCandidates(name: string, opts?: {
+    allowRemote?: boolean;
+}): Promise<EndpointCandidate[]>;
+export declare function resolveHostBotBaseUrl(name: string, opts?: {
+    allowRemote?: boolean;
+    probePath?: string;
+    probeTimeoutMs?: number;
+}): Promise<EndpointCandidate | null>;
+//# sourceMappingURL=resolve-endpoint.d.ts.map

package/dist/src/resolve-endpoint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-endpoint.d.ts","sourceRoot":"","sources":["../../src/resolve-endpoint.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;CACb;AAgFD,wBAAsB,6BAA6B,CACjD,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAE,GAC/B,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAmB9B;AAED,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5E,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAgBnC"}

package/dist/src/resolve-endpoint.js

@@ -0,0 +1,112 @@
+import Docker from "dockerode";
+import { isValidUrl } from "../shared/validation.js";
+import { log } from "../shared/logger.js";
+import { readSettings } from "./store.js";
+const docker = new Docker();
+const BOT_PORT = "3000/tcp";
+async function probeBaseUrl(baseUrl, path = "/health", timeoutMs = 2000) {
+    try {
+        const resp = await fetch(`${baseUrl}${path}`, {
+            signal: AbortSignal.timeout(timeoutMs),
+        });
+        return resp.ok;
+    }
+    catch {
+        return false;
+    }
+}
+async function listLocalCandidates(name) {
+    try {
+        const info = await docker.getContainer(`mecha-${name}`).inspect();
+        const candidates = [];
+        const portBinding = info.NetworkSettings?.Ports?.[BOT_PORT]?.[0]
+            ?? info.HostConfig?.PortBindings?.[BOT_PORT]?.[0];
+        if (portBinding?.HostPort) {
+            const host = portBinding.HostIp && portBinding.HostIp !== "0.0.0.0" && portBinding.HostIp !== "::"
+                ? portBinding.HostIp
+                : "127.0.0.1";
+            candidates.push({
+                baseUrl: `http://${host}:${portBinding.HostPort}`,
+                via: "localhost-port",
+            });
+        }
+        const dockerIp = info.NetworkSettings?.IPAddress;
+        if (dockerIp) {
+            candidates.push({
+                baseUrl: `http://${dockerIp}:3000`,
+                via: "docker-ip",
+            });
+        }
+        return candidates;
+    }
+    catch (err) {
+        log.debug(`resolve-endpoint: local inspect failed for "${name}"`, {
+            error: err instanceof Error ? err.message : String(err),
+        });
+        return [];
+    }
+}
+async function lookupHeadscaleCandidate(name) {
+    const settings = readSettings();
+    if (!settings.headscale_url || !settings.headscale_api_key || !isValidUrl(settings.headscale_url)) {
+        return null;
+    }
+    try {
+        const resp = await fetch(`${settings.headscale_url}/api/v1/machine`, {
+            headers: { Authorization: `Bearer ${settings.headscale_api_key}` },
+            signal: AbortSignal.timeout(5000),
+        });
+        if (!resp.ok)
+            return null;
+        const data = await resp.json();
+        const machine = data.machines?.find((m) => m.name === `mecha-${name}`);
+        const ip = machine?.ipAddresses?.[0];
+        if (!ip)
+            return null;
+        return {
+            baseUrl: `http://${ip}:3000`,
+            via: "headscale-ip",
+        };
+    }
+    catch (err) {
+        log.debug(`resolve-endpoint: headscale lookup failed for "${name}"`, {
+            error: err instanceof Error ? err.message : String(err),
+        });
+        return null;
+    }
+}
+export async function listHostBotEndpointCandidates(name, opts) {
+    const candidates = await listLocalCandidates(name);
+    if (opts?.allowRemote !== false) {
+        candidates.push({
+            baseUrl: `http://mecha-${name}:3000`,
+            via: "magicdns",
+        });
+        const headscaleCandidate = await lookupHeadscaleCandidate(name);
+        if (headscaleCandidate)
+            candidates.push(headscaleCandidate);
+    }
+    const seen = new Set();
+    return candidates.filter((candidate) => {
+        if (seen.has(candidate.baseUrl))
+            return false;
+        seen.add(candidate.baseUrl);
+        return true;
+    });
+}
+export async function resolveHostBotBaseUrl(name, opts) {
+    const probePath = opts?.probePath ?? "/health";
+    const probeTimeoutMs = opts?.probeTimeoutMs ?? 2000;
+    const candidates = await listHostBotEndpointCandidates(name, opts);
+    for (const candidate of candidates) {
+        if (await probeBaseUrl(candidate.baseUrl, probePath, probeTimeoutMs)) {
+            return candidate;
+        }
+        log.debug(`resolve-endpoint: candidate unreachable for "${name}"`, {
+            via: candidate.via,
+            baseUrl: candidate.baseUrl,
+        });
+    }
+    return null;
+}
+//# sourceMappingURL=resolve-endpoint.js.map

package/dist/src/resolve-endpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-endpoint.js","sourceRoot":"","sources":["../../src/resolve-endpoint.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,WAAW,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,GAAG,EAAE,MAAM,qBAAqB,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,MAAM,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;AAC5B,MAAM,QAAQ,GAAG,UAAU,CAAC;AAO5B,KAAK,UAAU,YAAY,CAAC,OAAe,EAAE,IAAI,GAAG,SAAS,EAAE,SAAS,GAAG,IAAI;IAC7E,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,GAAG,IAAI,EAAE,EAAE;YAC5C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;SACvC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAY;IAC7C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QAClE,MAAM,UAAU,GAAwB,EAAE,CAAC;QAC3C,MAAM,WAAW,GACf,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;eACxC,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,CAAC,QAAQ,CAA+D,EAAE,CAAC,CAAC,CAAC,CAAC;QAEnH,IAAI,WAAW,EAAE,QAAQ,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,IAAI,WAAW,CAAC,MAAM,KAAK,SAAS,IAAI,WAAW,CAAC,MAAM,KAAK,IAAI;gBAChG,CAAC,CAAC,WAAW,CAAC,MAAM;gBACpB,CAAC,CAAC,WAAW,CAAC;YAChB,UAAU,CAAC,IAAI,CAAC;gBACd,OAAO,EAAE,UAAU,IAAI,IAAI,WAAW,CAAC,QAAQ,EAAE;gBACjD,GAAG,EAAE,gBAAgB;aACtB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC;QACjD,IAAI,QAAQ,EAAE,CAAC;YACb,UAAU,CAAC,IAAI,CAAC;gBACd,OAAO,EAAE,UAAU,QAAQ,OAAO;gBAClC,GAAG,EAAE,WAAW;aACjB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,+CAA+C,IAAI,GAAG,EAAE;YAChE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,IAAY;IAClD,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,IAAI,CAAC,QAAQ,CAAC,aAAa,IAAI,CAAC,QAAQ,CAAC,iBAAiB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QAClG,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,CAAC,aAAa,iBAAiB,EAAE;YACnE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,QAAQ,CAAC,iBAAiB,EAAE,EAAE;YAClE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAE1B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAE3B,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,CAAC,CAAC;QACvE,MAAM,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAErB,OAAO;YACL,OAAO,EAAE,UAAU,EAAE,OAAO;YAC5B,GAAG,EAAE,cAAc;SACpB,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,kDAAkD,IAAI,GAAG,EAAE;YACnE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,IAAY,EACZ,IAAgC;IAEhC,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAEnD,IAAI,IAAI,EAAE,WAAW,KAAK,KAAK,EAAE,CAAC;QAChC,UAAU,CAAC,IAAI,CAAC;YACd,OAAO,EAAE,gBAAgB,IAAI,OAAO;YACpC,GAAG,EAAE,UAAU;SAChB,CAAC,CAAC;QAEH,MAAM,kBAAkB,GAAG,MAAM,wBAAwB,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,kBAAkB;YAAE,UAAU,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE;QACrC,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QAC9C,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAY,EACZ,IAA6E;IAE7E,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,SAAS,CAAC;IAC/C,MAAM,cAAc,GAAG,IAAI,EAAE,cAAc,IAAI,IAAI,CAAC;IACpD,MAAM,UAAU,GAAG,MAAM,6BAA6B,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAEnE,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,MAAM,YAAY,CAAC,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,cAAc,CAAC,EAAE,CAAC;YACrE,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,GAAG,CAAC,KAAK,CAAC,gDAAgD,IAAI,GAAG,EAAE;YACjE,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,OAAO,EAAE,SAAS,CAAC,OAAO;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/src/store.d.ts

@@ -0,0 +1,41 @@
+import { z } from "zod";
+export declare function getMechaDir(): string;
+export declare function ensureMechaDir(): void;
+declare const registrySchema: z.ZodObject<{
+    schema_version: z.ZodOptional<z.ZodNumber>;
+    bots: z.ZodRecord<z.ZodString, z.ZodObject<{
+        path: z.ZodString;
+        config: z.ZodOptional<z.ZodString>;
+        containerId: z.ZodOptional<z.ZodString>;
+        model: z.ZodOptional<z.ZodString>;
+        botToken: z.ZodOptional<z.ZodString>;
+        createdAt: z.ZodOptional<z.ZodString>;
+        desired_state: z.ZodOptional<z.ZodEnum<{
+            running: "running";
+            stopped: "stopped";
+            removed: "removed";
+        }>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+type Registry = z.infer<typeof registrySchema>;
+export declare function getBot(name: string): Registry["bots"][string] | undefined;
+export declare function setBot(name: string, entry: Registry["bots"][string]): void;
+export declare function setBotDesiredState(name: string, state: "running" | "stopped" | "removed"): void;
+export declare function removeBot(name: string): void;
+export declare function listBots(): Registry["bots"];
+declare const settingsSchema: z.ZodObject<{
+    schema_version: z.ZodOptional<z.ZodNumber>;
+    default_auth: z.ZodOptional<z.ZodString>;
+    headscale_url: z.ZodOptional<z.ZodString>;
+    headscale_api_key: z.ZodOptional<z.ZodString>;
+    fleet_internal_secret: z.ZodOptional<z.ZodString>;
+    totp_secret: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+type MechaSettings = z.infer<typeof settingsSchema>;
+export declare function readSettings(): MechaSettings;
+export declare function getOrCreateFleetInternalSecret(): string;
+export declare function getTotpSecret(): string | undefined;
+export declare function setTotpSecret(secret: string): void;
+export declare function clearTotpSecret(): void;
+export {};
+//# sourceMappingURL=store.d.ts.map

package/dist/src/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/store.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAED,wBAAgB,cAAc,IAAI,IAAI,CAcrC;AAID,QAAA,MAAM,cAAc;;;;;;;;;;;;;;;iBAWlB,CAAC;AAEH,KAAK,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAiE/C,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,SAAS,CAEzE;AAED,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,CAQ1E;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,IAAI,CAQ/F;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAO5C;AAED,wBAAgB,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC,CAE3C;AAID,QAAA,MAAM,cAAc;;;;;;;iBAOlB,CAAC;AAEH,KAAK,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEpD,wBAAgB,YAAY,IAAI,aAAa,CAS5C;AA8BD,wBAAgB,8BAA8B,IAAI,MAAM,CAevD;AAiBD,wBAAgB,aAAa,IAAI,MAAM,GAAG,SAAS,CAElD;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAElD;AAED,wBAAgB,eAAe,IAAI,IAAI,CAKtC"}

package/dist/src/store.js

@@ -0,0 +1,263 @@
+import { mkdirSync, existsSync, chmodSync, rmdirSync, statSync } from "node:fs";
+import { join } from "node:path";
+import { homedir } from "node:os";
+import { randomBytes } from "node:crypto";
+import { z } from "zod";
+import { safeReadJson } from "../shared/safe-read.js";
+import { atomicWriteJson } from "../shared/atomic-write.js";
+import { log } from "../shared/logger.js";
+// Settings use directory-based cross-process lock (withSettingsLock)
+const DEFAULT_MECHA_DIR = join(homedir(), ".mecha");
+const REGISTRY_SCHEMA_VERSION = 2;
+const SETTINGS_SCHEMA_VERSION = 1;
+export function getMechaDir() {
+    return process.env.MECHA_HOME ?? DEFAULT_MECHA_DIR;
+}
+export function ensureMechaDir() {
+    mkdirSync(join(getMechaDir(), "bots"), { recursive: true });
+    // Ensure registry.json exists
+    const regPath = join(getMechaDir(), "registry.json");
+    if (!existsSync(regPath)) {
+        atomicWriteJson(regPath, { schema_version: REGISTRY_SCHEMA_VERSION, bots: {} });
+    }
+    try {
+        chmodSync(regPath, 0o600);
+    }
+    catch { /* best-effort */ }
+    // Ensure mecha.json exists with restrictive permissions
+    const settingsPath = join(getMechaDir(), "mecha.json");
+    if (!existsSync(settingsPath)) {
+        atomicWriteJson(settingsPath, { schema_version: SETTINGS_SCHEMA_VERSION });
+    }
+    try {
+        chmodSync(settingsPath, 0o600);
+    }
+    catch { /* best-effort */ }
+}
+// --- Registry ---
+const registrySchema = z.object({
+    schema_version: z.number().int().optional(),
+    bots: z.record(z.string(), z.object({
+        path: z.string(),
+        config: z.string().optional(),
+        containerId: z.string().optional(),
+        model: z.string().optional(),
+        botToken: z.string().optional(),
+        createdAt: z.string().optional(),
+        desired_state: z.enum(["running", "stopped", "removed"]).optional(),
+    })),
+});
+function registryPath() {
+    return join(getMechaDir(), "registry.json");
+}
+function lockDir() { return join(getMechaDir(), ".registry.lock"); }
+const LOCK_STALE_MS = 30_000;
+function withRegistryLock(fn) {
+    const deadline = Date.now() + 5000;
+    let acquired = false;
+    while (true) {
+        try {
+            mkdirSync(lockDir());
+            acquired = true;
+            break;
+        }
+        catch (err) {
+            if (err.code !== "EEXIST")
+                throw err;
+            // Check for stale lock
+            try {
+                const stat = statSync(lockDir());
+                if (Date.now() - stat.mtimeMs > LOCK_STALE_MS) {
+                    try {
+                        rmdirSync(lockDir());
+                    }
+                    catch { /* race with other process */ }
+                    continue;
+                }
+            }
+            catch { /* lock dir gone, retry */
+                continue;
+            }
+            if (Date.now() >= deadline) {
+                throw new Error("Registry lock timeout — another mecha process may be stuck. Remove ~/.mecha/.registry.lock manually if needed.");
+            }
+            // Synchronous wait — we need this to be sync for withRegistryLock.
+            // Use Atomics.wait on a dummy buffer for a non-spinning delay.
+            const waitMs = 10;
+            try {
+                Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, waitMs);
+            }
+            catch {
+                // Fallback: brief spin (environments without SharedArrayBuffer)
+                const start = Date.now();
+                while (Date.now() - start < waitMs) { /* spin */ }
+            }
+        }
+    }
+    try {
+        return fn();
+    }
+    finally {
+        if (acquired) {
+            try {
+                rmdirSync(lockDir());
+            }
+            catch { /* best-effort */ }
+        }
+    }
+}
+function readRegistry() {
+    const result = safeReadJson(registryPath(), "registry", registrySchema);
+    if (!result.ok) {
+        if (result.reason !== "missing") {
+            log.warn(`Registry read failed: ${result.reason} — ${result.detail}`);
+        }
+        return { schema_version: REGISTRY_SCHEMA_VERSION, bots: {} };
+    }
+    return {
+        schema_version: result.data.schema_version ?? REGISTRY_SCHEMA_VERSION,
+        bots: result.data.bots,
+    };
+}
+export function getBot(name) {
+    return readRegistry().bots[name];
+}
+export function setBot(name, entry) {
+    withRegistryLock(() => {
+        const reg = readRegistry();
+        reg.schema_version = REGISTRY_SCHEMA_VERSION;
+        reg.bots[name] = entry;
+        atomicWriteJson(registryPath(), reg);
+        try {
+            chmodSync(registryPath(), 0o600);
+        }
+        catch { /* best-effort */ }
+    });
+}
+export function setBotDesiredState(name, state) {
+    withRegistryLock(() => {
+        const reg = readRegistry();
+        if (!reg.bots[name])
+            return;
+        reg.bots[name].desired_state = state;
+        reg.schema_version = REGISTRY_SCHEMA_VERSION;
+        atomicWriteJson(registryPath(), reg);
+    });
+}
+export function removeBot(name) {
+    withRegistryLock(() => {
+        const reg = readRegistry();
+        reg.schema_version = REGISTRY_SCHEMA_VERSION;
+        delete reg.bots[name];
+        atomicWriteJson(registryPath(), reg);
+    });
+}
+export function listBots() {
+    return readRegistry().bots;
+}
+// --- Settings ---
+const settingsSchema = z.object({
+    schema_version: z.number().int().optional(),
+    default_auth: z.string().optional(),
+    headscale_url: z.string().url().optional(),
+    headscale_api_key: z.string().optional(),
+    fleet_internal_secret: z.string().optional(),
+    totp_secret: z.string().optional(),
+});
+export function readSettings() {
+    const result = safeReadJson(join(getMechaDir(), "mecha.json"), "mecha.json", settingsSchema);
+    if (!result.ok) {
+        if (result.reason !== "missing") {
+            log.warn(`Settings read failed: ${result.reason} — ${result.detail}`);
+        }
+        return { schema_version: SETTINGS_SCHEMA_VERSION };
+    }
+    return { ...result.data, schema_version: result.data.schema_version ?? SETTINGS_SCHEMA_VERSION };
+}
+/** Cross-process settings lock using directory-based mutex (same pattern as registry lock) */
+function withSettingsLock(fn) {
+    const lockDir = join(getMechaDir(), ".settings.lock");
+    const maxWait = 5000;
+    const start = Date.now();
+    while (true) {
+        try {
+            mkdirSync(lockDir);
+            break; // acquired
+        }
+        catch {
+            if (Date.now() - start > maxWait) {
+                // Stale lock — force remove and retry once
+                try {
+                    rmdirSync(lockDir);
+                }
+                catch { /* ignore */ }
+                try {
+                    mkdirSync(lockDir);
+                    break;
+                }
+                catch { /* fall through */ }
+                throw new Error("Timed out acquiring settings lock");
+            }
+            // Spin-wait 10ms
+            const end = Date.now() + 10;
+            while (Date.now() < end) { /* spin */ }
+        }
+    }
+    try {
+        return fn();
+    }
+    finally {
+        try {
+            rmdirSync(lockDir);
+        }
+        catch { /* ignore */ }
+    }
+}
+export function getOrCreateFleetInternalSecret() {
+    return withSettingsLock(() => {
+        const settingsPath = join(getMechaDir(), "mecha.json");
+        const settings = readSettings();
+        if (settings.fleet_internal_secret)
+            return settings.fleet_internal_secret;
+        const fleetInternalSecret = randomBytes(24).toString("hex");
+        atomicWriteJson(settingsPath, {
+            ...settings,
+            schema_version: SETTINGS_SCHEMA_VERSION,
+            fleet_internal_secret: fleetInternalSecret,
+        });
+        try {
+            chmodSync(settingsPath, 0o600);
+        }
+        catch { /* best-effort */ }
+        return fleetInternalSecret;
+    });
+}
+/** Write settings with cross-process synchronization */
+function writeSettingsSafe(updater) {
+    withSettingsLock(() => {
+        const settingsPath = join(getMechaDir(), "mecha.json");
+        const settings = readSettings();
+        atomicWriteJson(settingsPath, {
+            ...updater(settings),
+            schema_version: SETTINGS_SCHEMA_VERSION,
+        });
+        try {
+            chmodSync(settingsPath, 0o600);
+        }
+        catch { /* best-effort */ }
+    });
+}
+// --- TOTP ---
+export function getTotpSecret() {
+    return readSettings().totp_secret;
+}
+export function setTotpSecret(secret) {
+    writeSettingsSafe((settings) => ({ ...settings, totp_secret: secret }));
+}
+export function clearTotpSecret() {
+    writeSettingsSafe((settings) => {
+        const { totp_secret: _, ...rest } = settings;
+        return rest;
+    });
+}
+//# sourceMappingURL=store.js.map

package/dist/src/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAChF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,GAAG,EAAE,MAAM,qBAAqB,CAAC;AAC1C,qEAAqE;AAErE,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AACpD,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAClC,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAElC,MAAM,UAAU,WAAW;IACzB,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,iBAAiB,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,8BAA8B;IAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,EAAE,eAAe,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,eAAe,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,uBAAuB,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC;QAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC9D,wDAAwD;IACxD,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,EAAE,YAAY,CAAC,CAAC;IACvD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,eAAe,CAAC,YAAY,EAAE,EAAE,cAAc,EAAE,uBAAuB,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC;QAAC,SAAS,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;AACrE,CAAC;AAED,mBAAmB;AAEnB,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC;QAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAClC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;KACpE,CAAC,CAAC;CACJ,CAAC,CAAC;AAIH,SAAS,YAAY;IACnB,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,eAAe,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,OAAO,KAAa,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;AAC5E,MAAM,aAAa,GAAG,MAAM,CAAC;AAE7B,SAAS,gBAAgB,CAAI,EAAW;IACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IACnC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,MAAM;QACR,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,GAAG,CAAC;YAChE,uBAAuB;YACvB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;gBACjC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,GAAG,aAAa,EAAE,CAAC;oBAC9C,IAAI,CAAC;wBAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,6BAA6B,CAAC,CAAC;oBACrE,SAAS;gBACX,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAC,0BAA0B;gBAAC,SAAS;YAAC,CAAC;YAChD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,gHAAgH,CAAC,CAAC;YACpI,CAAC;YACD,mEAAmE;YACnE,+DAA+D;YAC/D,MAAM,MAAM,GAAG,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;YACvE,CAAC;YAAC,MAAM,CAAC;gBACP,gEAAgE;gBAChE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACzB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,MAAM,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC;gBAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,YAAY;IACnB,MAAM,MAAM,GAAG,YAAY,CAAC,YAAY,EAAE,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;IACxE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAChC,GAAG,CAAC,IAAI,CAAC,yBAAyB,MAAM,CAAC,MAAM,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAC/D,CAAC;IACD,OAAO;QACL,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,IAAI,uBAAuB;QACrE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;KACvB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,IAAY;IACjC,OAAO,YAAY,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,IAAY,EAAE,KAA+B;IAClE,gBAAgB,CAAC,GAAG,EAAE;QACpB,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAC3B,GAAG,CAAC,cAAc,GAAG,uBAAuB,CAAC;QAC7C,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACvB,eAAe,CAAC,YAAY,EAAE,EAAE,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC;YAAC,SAAS,CAAC,YAAY,EAAE,EAAE,KAAK,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,KAAwC;IACvF,gBAAgB,CAAC,GAAG,EAAE;QACpB,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO;QAC5B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,aAAa,GAAG,KAAK,CAAC;QACrC,GAAG,CAAC,cAAc,GAAG,uBAAuB,CAAC;QAC7C,eAAe,CAAC,YAAY,EAAE,EAAE,GAAG,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,gBAAgB,CAAC,GAAG,EAAE;QACpB,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAC3B,GAAG,CAAC,cAAc,GAAG,uBAAuB,CAAC;QAC7C,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,eAAe,CAAC,YAAY,EAAE,EAAE,GAAG,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,QAAQ;IACtB,OAAO,YAAY,EAAE,CAAC,IAAI,CAAC;AAC7B,CAAC;AAED,mBAAmB;AAEnB,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC3C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC1C,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC;AAIH,MAAM,UAAU,YAAY;IAC1B,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,YAAY,CAAC,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;IAC7F,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAChC,GAAG,CAAC,IAAI,CAAC,yBAAyB,MAAM,CAAC,MAAM,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,CAAC;IACrD,CAAC;IACD,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,IAAI,uBAAuB,EAAE,CAAC;AACnG,CAAC;AAED,8FAA8F;AAC9F,SAAS,gBAAgB,CAAI,EAAW;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,EAAE,gBAAgB,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,IAAI,CAAC;IACrB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,SAAS,CAAC,OAAO,CAAC,CAAC;YACnB,MAAM,CAAC,WAAW;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,OAAO,EAAE,CAAC;gBACjC,2CAA2C;gBAC3C,IAAI,CAAC;oBAAC,SAAS,CAAC,OAAO,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;gBAClD,IAAI,CAAC;oBAAC,SAAS,CAAC,OAAO,CAAC,CAAC;oBAAC,MAAM;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;gBAC/D,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACvD,CAAC;YACD,iBAAiB;YACjB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,8BAA8B;IAC5C,OAAO,gBAAgB,CAAC,GAAG,EAAE;QAC3B,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,EAAE,YAAY,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;QAChC,IAAI,QAAQ,CAAC,qBAAqB;YAAE,OAAO,QAAQ,CAAC,qBAAqB,CAAC;QAE1E,MAAM,mBAAmB,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC5D,eAAe,CAAC,YAAY,EAAE;YAC5B,GAAG,QAAQ;YACX,cAAc,EAAE,uBAAuB;YACvC,qBAAqB,EAAE,mBAAmB;SAC3C,CAAC,CAAC;QACH,IAAI,CAAC;YAAC,SAAS,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACnE,OAAO,mBAAmB,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,wDAAwD;AACxD,SAAS,iBAAiB,CAAC,OAAuE;IAChG,gBAAgB,CAAC,GAAG,EAAE;QACpB,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,EAAE,YAAY,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;QAChC,eAAe,CAAC,YAAY,EAAE;YAC5B,GAAG,OAAO,CAAC,QAAQ,CAAC;YACpB,cAAc,EAAE,uBAAuB;SACxC,CAAC,CAAC;QACH,IAAI,CAAC;YAAC,SAAS,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,eAAe;AAEf,MAAM,UAAU,aAAa;IAC3B,OAAO,YAAY,EAAE,CAAC,WAAW,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,iBAAiB,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,iBAAiB,CAAC,CAAC,QAAQ,EAAE,EAAE;QAC7B,MAAM,EAAE,WAAW,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,QAAQ,CAAC;QAC7C,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC"}