@ours.network/mcp 1.1.1 → 1.2.0-nightly.10

package/dist/container.js

@@ -0,0 +1,6 @@
+var U=Object.defineProperty;var $=(e,t)=>()=>(e&&(t=e(e=0)),t);var k=(e,t)=>{for(var i in t)U(e,i,{get:t[i],enumerable:!0})};var N={};k(N,{APPLICATION_IDENTITIES_ENV:()=>v,APPLICATION_IDENTITIES_VERSION:()=>y,ApplicationIdentityStore:()=>g,applicationIdentityConfigPath:()=>E,filterApplicationIdentities:()=>W});import{randomUUID as T}from"node:crypto";import{chmod as x,mkdir as _,readFile as D,rename as L,unlink as J,writeFile as j}from"node:fs/promises";import{homedir as M}from"node:os";import{dirname as F,resolve as f}from"node:path";function E(e=process.env){let t=(e[v]??"").trim();return f(t||f(M(),".ours-mcp","config.json"))}function I(e,t,i,n){if(!e||typeof e!="object"||Array.isArray(e))throw new Error(`Invalid ours-mcp application identity config at ${t}: "${i}s" must be an object.`);let r={};for(let[a,o]of Object.entries(e)){if(!o||typeof o!="object"||Array.isArray(o))throw new Error(`Invalid ours-mcp application identity config at ${t}: ${i} ${JSON.stringify(a)} must be an object.`);let s=o;if(!Array.isArray(s.identities)||s.identities.some(p=>typeof p!="string"||p.length===0))throw new Error(`Invalid ours-mcp application identity config at ${t}: ${i} ${JSON.stringify(a)} has an invalid identity list.`);r[n(a)]={identities:[...new Set(s.identities)].sort()}}return r}function V(e,t){let i;try{i=JSON.parse(e)}catch(o){throw new Error(`Invalid ours-mcp application identity config at ${t}: ${String(o)}`)}if(!i||typeof i!="object"||Array.isArray(i))throw new Error(`Invalid ours-mcp application identity config at ${t}: expected an object.`);let n=i;if(n.version!==y)throw new Error(`Unsupported ours-mcp application identity config version at ${t}: expected ${y}, found ${String(n.version)}.`);let r=I(n.daemons,t,"daemon",f),a=n.instances===void 0?{}:I(n.instances,t,"instance",o=>{if(!S.test(o))throw new Error(`Invalid ours-mcp application identity config at ${t}: instance ${JSON.stringify(o)} must be a lowercase UUID.`);return o});return{version:1,daemons:r,instances:a}}async function m(e){try{return V(await D(e,"utf8"),e)}catch(t){if(t.code==="ENOENT")return G();throw t}}async function h(e,t){let i=F(e);await _(i,{recursive:!0,mode:448});let n=`${e}.${process.pid}.${T()}.tmp`;try{await j(n,`${JSON.stringify(t,null,2)}
+`,{mode:384,flag:"wx"}),await L(n,e),await x(e,384)}catch(r){try{await J(n)}catch{}throw r}}async function W(e,t){let i=new Set(await e.list());return t.filter(n=>i.has(n.name))}var y,v,S,G,g,O=$(()=>{"use strict";y=1,v="OURS_MCP_CONFIG",S=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/,G=()=>({version:1,daemons:{},instances:{}});g=class{stateDir;instanceId;path;constructor(t,i={}){if(typeof t=="string")this.stateDir=f(t),this.instanceId=null;else{if(!t||!S.test(t.instanceId))throw new Error("Application identity instanceId must be a lowercase UUID.");this.stateDir=null,this.instanceId=t.instanceId}this.path=f(i.path??E(i.env))}rows(t){return this.instanceId===null?t.daemons:t.instances}key(){return this.instanceId??this.stateDir}async list(){let t=await m(this.path);return[...this.rows(t)[this.key()]?.identities??[]]}async has(t){return(await this.list()).includes(t)}async add(t){if(!t)throw new Error("Cannot add an empty identity name to ours-mcp.");let i=await m(this.path),n=this.rows(i),r=this.key(),a=n[r]?.identities??[];a.includes(t)||(n[r]={identities:[...a,t].sort()},await h(this.path,i))}async remove(t){let i=await m(this.path),n=this.rows(i),r=this.key(),a=n[r];if(!a?.identities.includes(t))return;let o=a.identities.filter(s=>s!==t);o.length===0?delete n[r]:n[r]={identities:o},await h(this.path,i)}}});import{createReadStream as H,createWriteStream as Y,mkdirSync as A,rmSync as C}from"node:fs";import{basename as q,dirname as z,join as l}from"node:path";import{homedir as B}from"node:os";import{pipeline as P}from"node:stream/promises";import{randomUUID as K}from"node:crypto";import{readGatewayClientProfile as Q}from"@ours.network/sdk/client";import{fileURLToPath as X}from"node:url";var[w,c="proxy",...d]=process.argv.slice(2),u=Q(process.env);if(!w||u.expectedInstanceId!==w)throw new Error("MCP target does not match the selected gateway profile");var R=process.env.OURS_MCP_CONFIG?z(process.env.OURS_MCP_CONFIG):l(process.env.HOME||B(),".ours-mcp");process.env.OURS_CONFIG=u.configPath;process.env.OURS_MCP_CONFIG=l(R,"config.json");process.env.OURS_FILES_ALWAYS_PROMPT="1";var b=new URL("./cli.js",import.meta.url),Z=X(b);if(["file-stage","file-target","file-read","file-remove"].includes(c)){let[e,t]=d;if(!/^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(e??""))throw new Error("Invalid file transfer ID");if(d.length!==(c==="file-stage"?2:1))throw new Error("Invalid file transfer arguments");let i=l(R,"transfers"),n=l(i,e);if(c==="file-remove")C(n,{recursive:!0,force:!0});else if(c==="file-read")await P(H(l(n,"file")),process.stdout);else{if(c==="file-stage"&&(!t||q(t)!==t||[".",".."].includes(t)))throw new Error("Invalid transfer filename");A(i,{recursive:!0,mode:448}),A(n,{mode:448});let r=l(n,c==="file-stage"?t:"file");try{c==="file-stage"&&await P(process.stdin,Y(r,{flags:"wx",mode:384})),process.stdout.write(JSON.stringify({path:r})+`
+`)}catch(a){throw C(n,{recursive:!0,force:!0}),a}}}else if(["proxy","session-end","version"].includes(c))process.argv=[process.execPath,Z,c,...d],await import(b.href);else if(["application-identities","hook-state","watch"].includes(c)){let{ApplicationIdentityStore:e}=await Promise.resolve().then(()=>(O(),N)),i=await new e({instanceId:w}).list();if(c==="application-identities")process.stdout.write(JSON.stringify(i)+`
+`);else{let{attachOursClient:n}=await import("@ours.network/sdk"),r=await n({...u,sessionMode:"external",leaseToken:K(),env:{}});try{if(c==="hook-state"){let a=await r.listIdentities(),o=await r.unread();process.stdout.write(JSON.stringify({identities:a.map(s=>s.name),bindings:a.filter(s=>"session"in s&&(s.session==="mine"||s.session==="other-live")).map(s=>s.name),unread:{identities:o.identities.filter(s=>typeof s.name=="string"&&i.includes(s.name))}})+`
+`)}else{if(d.length>1||d[0]?.startsWith("-"))throw new Error("Usage: watch [identity]");let a=d.length?[d[0]]:i,o=new AbortController;process.stdin.once("end",()=>o.abort()),process.stdin.resume();for(let s of["SIGINT","SIGTERM"])process.once(s,()=>o.abort());await Promise.all(a.map(async s=>{for await(let p of r.watchNotifications(s,{kinds:["inbound"],signal:o.signal}))process.stdout.write(JSON.stringify({identity:s,...p})+`
+`)}))}}finally{await r.close()}}}else throw new Error("Unsupported container MCP operation");

package/dist/host-client.js

@@ -0,0 +1,2 @@
+import{readGatewayClientProfile as I,validateGatewayClientProfile as P}from"@ours.network/sdk/client";var f=P;function E(t){return P(I({OURS_CONFIG:t}))}function w(t=process.env){let{configPath:i,...e}=I(t);return{profile:e,configPath:i}}function S(t=process.env){return w(t).profile}import{createHash as V,randomUUID as b}from"node:crypto";import{chmod as A,mkdir as W,readFile as X,rename as z,unlink as B,writeFile as Q}from"node:fs/promises";import{dirname as Y,join as K,resolve as Z}from"node:path";import{attachOursClient as tt}from"@ours.network/sdk";import{createHash as F}from"node:crypto";import{openSync as j,closeSync as _,lstatSync as v,mkdirSync as L,chmodSync as J,constants as p}from"node:fs";import{join as N}from"node:path";import{createRequire as C}from"node:module";var G=5e3,d=null,x=!1;function q(){if(d)return d;if(x)throw new Error("No SQLite implementation available for native session guard");x=!0;try{return d=C(import.meta.url)("node:sqlite").DatabaseSync,d}catch{try{let t=C(import.meta.url)("better-sqlite3");return d=t.default??t,d}catch{throw new Error("Native session guard requires node:sqlite (Node >=22.13) or better-sqlite3")}}}function M(t){try{let e=j(t,p.O_RDWR|p.O_CREAT|p.O_EXCL|p.O_NOFOLLOW,384);_(e)}catch(e){if(e.code!=="EEXIST")throw e}let i=v(t);if(!i.isFile()||i.uid!==process.getuid()||i.mode&63||i.nlink!==1)throw new Error("Native session guard file must be an owner-only regular file")}function O(t){let i=process.getuid(),e=N(`/tmp/ours-${i}`,"session-guards");L(e,{recursive:!0,mode:448});try{J(e,448)}catch{}let n=F("sha256").update(t).digest("hex"),r=N(e,`${n}.guard`);M(r);let o=v(r),s=q(),l=new s(r);try{let c=v(r);if(o.dev!==c.dev||o.ino!==c.ino||o.mode!==c.mode||o.uid!==c.uid)throw new Error("Native session guard file changed during acquisition");return l.exec(`PRAGMA busy_timeout=${G}; BEGIN EXCLUSIVE`),()=>{try{l.close()}catch{}}}catch(c){try{l.close()}catch{}throw c}}var g=1,$=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/,a=new Map,u=new Map;function et(t){if(typeof t!="string"||t.length===0||t.length>4096||t.trim()!==t||t.includes("\0"))throw new Error("Native session metadata is missing or invalid for this host-profile tool call.");return t}function y(t,i,e){if(!t||!t.startsWith("/")||Z(t)!==t)throw new Error("Native session host record root must be a normalized absolute path.");if(!$.test(i))throw new Error("Native session daemon instance must be a lowercase UUID.");let n=V("sha256").update(et(e),"utf8").digest("hex");return K(t,"sessions",i,`${n}.json`)}function nt(t,i){let e;try{e=JSON.parse(t)}catch(o){throw new Error(`Invalid native session record at ${i}: ${String(o)}`)}if(!e||typeof e!="object"||Array.isArray(e))throw new Error(`Invalid native session record at ${i}: expected an object.`);let n=e;if(Object.keys(n).sort().join(",")!=="ownerInstanceId,state,version"||n.version!==g||typeof n.ownerInstanceId!="string"||!$.test(n.ownerInstanceId)||!["active","pending","ended"].includes(String(n.state)))throw new Error(`Invalid native session record at ${i}.`);return n}async function m(t){try{return nt(await X(t,"utf8"),t)}catch(i){if(i.code==="ENOENT")return null;throw i}}async function h(t,i){let e=Y(t);await W(e,{recursive:!0,mode:448}),await A(e,448);let n=`${t}.${process.pid}.${b()}.tmp`;try{await Q(n,`${JSON.stringify(i,null,2)}
+`,{mode:384,flag:"wx"}),await z(n,t),await A(t,384)}catch(r){try{await B(n)}catch{}throw r}}async function k(t,i){let e=u.get(t)??Promise.resolve(),n,r=new Promise(l=>{n=l}),o=e.catch(()=>{}).then(()=>r);u.set(t,o),await e.catch(()=>{});let s;try{return s=O(t),await i()}finally{try{s?.()}finally{n(),u.get(t)===o&&u.delete(t)}}}function D(t,i){return tt({endpoint:t.endpoint,expectedInstanceId:t.expectedInstanceId,credentialPath:t.credentialPath,sessionMode:"external",leaseToken:i,env:{}})}function R(t,i,e){let n=a.get(t);if(n?.ownerInstanceId===e)return n.promise;n&&(a.delete(t),n.promise.then(s=>s.close()).catch(()=>{}));let r=D(i,e),o={ownerInstanceId:e,promise:r};return a.set(t,o),r.catch(()=>{a.get(t)===o&&a.delete(t)}),r}async function it(t,i,e){let n=a.get(t),r=n?.ownerInstanceId===e?await n.promise:await D(i,e);try{await r.releaseLease()}finally{n?.ownerInstanceId!==e&&await r.close()}}async function T(t,i,e){await it(t,i,e);let n=await m(t);n?.state==="pending"&&n.ownerInstanceId===e&&await h(t,{version:g,ownerInstanceId:e,state:"ended"});let r=a.get(t);r?.ownerInstanceId===e&&(a.delete(t),r.promise.then(o=>o.close()).catch(()=>{}))}async function H(t,i,e){let n=f(t),r=y(e,n.expectedInstanceId,i);return k(r,async()=>{let o=await m(r);if(o?.state==="pending"&&(await T(r,n,o.ownerInstanceId),o=await m(r)),o?.state==="active")return R(r,n,o.ownerInstanceId);let s=b();return await h(r,{version:g,ownerInstanceId:s,state:"active"}),R(r,n,s)})}async function U(t,i,e){let n=f(t),r=y(e,n.expectedInstanceId,i);await k(r,async()=>{let o=await m(r);o===null||o.state==="ended"||(o.state==="active"&&(o={version:g,ownerInstanceId:o.ownerInstanceId,state:"pending"},await h(r,o)),await T(r,n,o.ownerInstanceId))})}export{U as endNativeSessionAtRoot,S as hostProfileFromEnv,w as hostProfileSelectionFromEnv,H as nativeClientForAtRoot,y as nativeSessionRecordPath,E as readHostProfile,f as validateHostProfile};

package/dist/host-profile.js

@@ -0,0 +1 @@
+import{readGatewayClientProfile as o,validateGatewayClientProfile as r}from"@ours.network/sdk/client";var l=r;function f(e){return r(o({OURS_CONFIG:e}))}function i(e=process.env){let{configPath:t,...n}=o(e);return{profile:n,configPath:t}}function a(e=process.env){return i(e).profile}export{a as hostProfileFromEnv,i as hostProfileSelectionFromEnv,f as readHostProfile,l as validateHostProfile};

package/dist/native-session.js

@@ -0,0 +1,2 @@
+import{createHash as M,randomUUID as b}from"node:crypto";import{chmod as C,mkdir as V,readFile as W,rename as X,unlink as z,writeFile as B}from"node:fs/promises";import{dirname as v,join as Q,resolve as Y}from"node:path";import{attachOursClient as K}from"@ours.network/sdk";import{homedir as D}from"node:os";import{dirname as st,resolve as I}from"node:path";var T="OURS_MCP_CONFIG";function g(t=process.env){let n=(t[T]??"").trim();return I(n||I(D(),".ours-mcp","config.json"))}import{readGatewayClientProfile as dt,validateGatewayClientProfile as U}from"@ours.network/sdk/client";var y=U;import{createHash as _}from"node:crypto";import{openSync as L,closeSync as j,lstatSync as w,mkdirSync as J,chmodSync as H,constants as f}from"node:fs";import{join as P}from"node:path";import{createRequire as E}from"node:module";var F=5e3,d=null,S=!1;function G(){if(d)return d;if(S)throw new Error("No SQLite implementation available for native session guard");S=!0;try{return d=E(import.meta.url)("node:sqlite").DatabaseSync,d}catch{try{let t=E(import.meta.url)("better-sqlite3");return d=t.default??t,d}catch{throw new Error("Native session guard requires node:sqlite (Node >=22.13) or better-sqlite3")}}}function q(t){try{let e=L(t,f.O_RDWR|f.O_CREAT|f.O_EXCL|f.O_NOFOLLOW,384);j(e)}catch(e){if(e.code!=="EEXIST")throw e}let n=w(t);if(!n.isFile()||n.uid!==process.getuid()||n.mode&63||n.nlink!==1)throw new Error("Native session guard file must be an owner-only regular file")}function N(t){let n=process.getuid(),e=P(`/tmp/ours-${n}`,"session-guards");J(e,{recursive:!0,mode:448});try{H(e,448)}catch{}let i=_("sha256").update(t).digest("hex"),r=P(e,`${i}.guard`);q(r);let o=w(r),s=G(),l=new s(r);try{let c=w(r);if(o.dev!==c.dev||o.ino!==c.ino||o.mode!==c.mode||o.uid!==c.uid)throw new Error("Native session guard file changed during acquisition");return l.exec(`PRAGMA busy_timeout=${F}; BEGIN EXCLUSIVE`),()=>{try{l.close()}catch{}}}catch(c){try{l.close()}catch{}throw c}}var m=1,x=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/,a=new Map,u=new Map;function Z(t){if(typeof t!="string"||t.length===0||t.length>4096||t.trim()!==t||t.includes("\0"))throw new Error("Native session metadata is missing or invalid for this host-profile tool call.");return t}function $(t,n,e){if(!t||!t.startsWith("/")||Y(t)!==t)throw new Error("Native session host record root must be a normalized absolute path.");if(!x.test(n))throw new Error("Native session daemon instance must be a lowercase UUID.");let i=M("sha256").update(Z(e),"utf8").digest("hex");return Q(t,"sessions",n,`${i}.json`)}function tt(t,n){let e;try{e=JSON.parse(t)}catch(o){throw new Error(`Invalid native session record at ${n}: ${String(o)}`)}if(!e||typeof e!="object"||Array.isArray(e))throw new Error(`Invalid native session record at ${n}: expected an object.`);let i=e;if(Object.keys(i).sort().join(",")!=="ownerInstanceId,state,version"||i.version!==m||typeof i.ownerInstanceId!="string"||!x.test(i.ownerInstanceId)||!["active","pending","ended"].includes(String(i.state)))throw new Error(`Invalid native session record at ${n}.`);return i}async function p(t){try{return tt(await W(t,"utf8"),t)}catch(n){if(n.code==="ENOENT")return null;throw n}}async function h(t,n){let e=v(t);await V(e,{recursive:!0,mode:448}),await C(e,448);let i=`${t}.${process.pid}.${b()}.tmp`;try{await B(i,`${JSON.stringify(n,null,2)}
+`,{mode:384,flag:"wx"}),await X(i,t),await C(t,384)}catch(r){try{await z(i)}catch{}throw r}}async function A(t,n){let e=u.get(t)??Promise.resolve(),i,r=new Promise(l=>{i=l}),o=e.catch(()=>{}).then(()=>r);u.set(t,o),await e.catch(()=>{});let s;try{return s=N(t),await n()}finally{try{s?.()}finally{i(),u.get(t)===o&&u.delete(t)}}}function R(t,n){return K({endpoint:t.endpoint,expectedInstanceId:t.expectedInstanceId,credentialPath:t.credentialPath,sessionMode:"external",leaseToken:n,env:{}})}function O(t,n,e){let i=a.get(t);if(i?.ownerInstanceId===e)return i.promise;i&&(a.delete(t),i.promise.then(s=>s.close()).catch(()=>{}));let r=R(n,e),o={ownerInstanceId:e,promise:r};return a.set(t,o),r.catch(()=>{a.get(t)===o&&a.delete(t)}),r}async function et(t,n,e){let i=a.get(t),r=i?.ownerInstanceId===e?await i.promise:await R(n,e);try{await r.releaseLease()}finally{i?.ownerInstanceId!==e&&await r.close()}}async function k(t,n,e){await et(t,n,e);let i=await p(t);i?.state==="pending"&&i.ownerInstanceId===e&&await h(t,{version:m,ownerInstanceId:e,state:"ended"});let r=a.get(t);r?.ownerInstanceId===e&&(a.delete(t),r.promise.then(o=>o.close()).catch(()=>{}))}async function St(t,n,e=process.env){return nt(t,n,v(g(e)))}async function nt(t,n,e){let i=y(t),r=$(e,i.expectedInstanceId,n);return A(r,async()=>{let o=await p(r);if(o?.state==="pending"&&(await k(r,i,o.ownerInstanceId),o=await p(r)),o?.state==="active")return O(r,i,o.ownerInstanceId);let s=b();return await h(r,{version:m,ownerInstanceId:s,state:"active"}),O(r,i,s)})}async function Nt(t,n,e=process.env){return it(t,n,v(g(e)))}async function it(t,n,e){let i=y(t),r=$(e,i.expectedInstanceId,n);await A(r,async()=>{let o=await p(r);o===null||o.state==="ended"||(o.state==="active"&&(o={version:m,ownerInstanceId:o.ownerInstanceId,state:"pending"},await h(r,o)),await k(r,i,o.ownerInstanceId))})}export{Nt as endNativeSession,it as endNativeSessionAtRoot,St as nativeClientFor,nt as nativeClientForAtRoot,$ as nativeSessionRecordPath};