@remcp/runtime 0.2.130 → 0.2.131

package/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## 0.2.131 — 2026-10-02
+
+- `network action=summary` is now bounded for Docker-heavy hosts: non-container interfaces are prioritized, at most eight interfaces and four addresses per interface are returned, and count/truncation metadata shows what was omitted.
+- `network action=interfaces` remains the complete adapter/address inventory. The MCP schema and tool names remain compatible; stable count/truncation fields are now declared for chaining.
+
 ## 0.2.130 — 2026-10-02
 
 - `computer_snapshot` now skips desktop-only probes on headless Linux and returns stable empty/unavailable desktop fields without false error noise. The shared `desktopSessionAvailable()` helper keeps this behavior aligned with live capability discovery.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remcp/runtime",
-  "version": "0.2.130",
+  "version": "0.2.131",
   "description": "First-party ReMCP local device runtime: filesystem, terminal, computer-use, browser, diagnostics and document tools over MCP.",
   "type": "module",
   "license": "MIT",

package/src/extended/catalog.mjs

@@ -58,7 +58,7 @@ const AI_TOOL_DESCRIPTIONS = Object.freeze({
   browser_evaluate: 'Use this as the powerful browser escape hatch only when browser_snapshot/find/action/wait cannot express the required page operation or inspection. JavaScript executes in page context and page content is untrusted.',
   service: 'Use this for operating-system service inventory/status/start/stop/restart. Prefer status before a mutation when service state matters; use start_process for ordinary commands that are not service-manager operations.',
   event_log: 'Use this to read bounded recent OS logs (Windows Event Log, macOS unified log or systemd journal) when diagnosing a service/app/system problem. Prefer it over an unbounded shell log dump.',
-  network: 'Use this for structured interfaces/DNS/routes/listeners inspection or a bounded TCP connectivity test. Prefer it over shell ip/netstat/nslookup commands for routine diagnostics.',
+  network: 'Use this for a compact network summary, full interface inventory, DNS/routes/listeners inspection or a bounded TCP connectivity test. Prefer action=summary for orientation and action=interfaces only when the complete adapter/address inventory is required; prefer this tool over shell ip/netstat/nslookup commands for routine diagnostics.',
   installed_apps: 'Use this to answer what software/packages are installed and their versions. Prefer a filter when looking for one product instead of returning the full inventory.',
   environment: 'Use this for PATH, shell, Node/runtime environment paths, architecture and optionally sanitized environment variables. Use get_system_info for host health such as CPU/memory/disk/uptime, and get_runtime_info for ReMCP policy, roots and limits. Secret-looking values remain masked.',
   audio: 'Use this to read or change the default output volume/mute state. Use action=status for inspection; set_volume requires a 0–100 value.',
@@ -211,7 +211,7 @@ const OUTPUT_FIELDS = Object.freeze({
   browser_evaluate: { target_id:outputString(), value:{} },
   service: { data:outputArray(outputObject('Service record.')), action:outputString(), name:outputString(), text:outputString() },
   event_log: { text:outputString('Bounded log output.'), data:outputArray(outputObject()) },
-  network: { hostname:outputString(), interfaces:outputObject(), dns:outputArray(outputString()), servers:outputArray(outputString()), host:outputString(), port:outputNumber(), ok:outputBoolean(), latency_ms:outputNumber(), data:outputArray(outputObject()) },
+  network: { hostname:outputString(), interfaces:outputObject(), dns:outputArray(outputString()), servers:outputArray(outputString()), host:outputString(), port:outputNumber(), ok:outputBoolean(), latency_ms:outputNumber(), interface_count:outputNumber(), interface_count_returned:outputNumber(), address_count:outputNumber(), address_count_returned:outputNumber(), interfaces_truncated:outputBoolean(), addresses_truncated:outputBoolean(), data:outputArray(outputObject()) },
   installed_apps: { data:outputArray(outputObject('Installed app/package with name/version/path where available.')) },
   environment: { platform:outputString(), arch:outputString(), hostname:outputString(), release:outputString(), shell:outputString(), path:outputString(), node:outputString(), env:outputObject() },
   audio: { volume:outputNumber(), muted:outputBoolean(), action:outputString(), text:outputString() },
@@ -562,7 +562,7 @@ export const extendedToolDefinitions = [
 
   define('service', 'Service control', 'List, inspect, start, stop, or restart operating-system services using Service Control Manager, launchctl, or systemd. Mutating actions pass through ReMCP command policy.', o({ action:e(['list','status','start','stop','restart']), name:s('Service/unit/launchd label.'), scope:e(['user','system']) }, ['action']), mutating, diagnosticHandlers.service, ['services']),
   define('event_log', 'Event logs', 'Read recent Windows Event Log, macOS unified log, or systemd journal entries with bounded time and result limits.', o({ log:s('Windows log name.'), since:s('Time window such as 30s, 10m, 2h, or 1d.'), filter:s(), query:s(), limit:n() }), readOnlyLive, diagnosticHandlers.event_log, ['logs']),
-  define('network', 'Network diagnostics', 'Inspect interfaces, DNS servers, routes and listening sockets, or perform a bounded TCP connectivity test to a host and port.', o({ action:e(['summary','interfaces','dns','routes','listeners','test']), host:s(), port:n(), timeout_ms:n() }), readOnlyOpen, diagnosticHandlers.network),
+  define('network', 'Network diagnostics', 'Inspect a bounded network summary, full interface inventory, DNS servers, routes and listening sockets, or perform a bounded TCP connectivity test to a host and port. Use action=interfaces when the complete adapter/address inventory is needed.', o({ action:e(['summary','interfaces','dns','routes','listeners','test']), host:s(), port:n(), timeout_ms:n() }), readOnlyOpen, diagnosticHandlers.network),
   define('installed_apps', 'Installed applications', 'Inventory installed applications or packages with versions and publishers where available using native package/application inventories.', o({ filter:s('Name substring.'), limit:n('Maximum results; default 1000.') }), readOnly, diagnosticHandlers.installed_apps, ['apps']),
   define('environment', 'Runtime environment', 'Report platform, architecture, Node version, working/home/temp paths, shell, PATH, and optionally environment variables. Environment variables are opt-in and secret-looking or credential-bearing values are masked.', o({ include_env:b('Include sanitized environment variables; default false.') }), readOnly, diagnosticHandlers.environment),
   define('audio', 'Audio control', 'Read or change default output volume or mute state using native operating-system audio controls when available.', o({ action:e(['status','set_volume','mute','unmute']), volume:n('0..100 for set_volume.') }, ['action']), mutatingNonDestructive, diagnosticHandlers.audio, ['audio']),

package/src/extended/diagnostics.mjs

@@ -133,11 +133,59 @@ export function linuxListenerBackend({ commandExistsFn = commandExists } = {}) {
   return null;
 }
 
+const CONTAINER_INTERFACE_PATTERN = /^(?:veth|docker\d*$|br-[0-9a-f]{6,}$)/i;
+
+export function compactNetworkSummary({
+  hostname = os.hostname(),
+  interfaces = os.networkInterfaces(),
+  dnsServers = dns.getServers(),
+  maxInterfaces = 8,
+  maxAddressesPerInterface = 4,
+} = {}) {
+  const entries = Object.entries(interfaces || {}).map(([name, rows], index) => {
+    const normalizedRows = Array.isArray(rows) ? rows.filter(Boolean) : [];
+    const hasExternal = normalizedRows.some(row => row?.internal !== true);
+    const rank = hasExternal
+      ? (CONTAINER_INTERFACE_PATTERN.test(name) ? 1 : 0)
+      : 2;
+    return { name, rows:normalizedRows, index, rank };
+  });
+  entries.sort((left, right) => left.rank - right.rank || left.index - right.index);
+
+  const interfaceLimit = clamp(maxInterfaces, 8, 1, 64);
+  const addressLimit = clamp(maxAddressesPerInterface, 4, 1, 16);
+  const selected = entries.slice(0, interfaceLimit);
+  const compact = {};
+  let addressCount = 0;
+  let addressCountReturned = 0;
+  let addressesTruncated = false;
+
+  for (const entry of entries) addressCount += entry.rows.length;
+  for (const entry of selected) {
+    const rows = entry.rows.slice(0, addressLimit);
+    compact[entry.name] = rows;
+    addressCountReturned += rows.length;
+    if (entry.rows.length > rows.length) addressesTruncated = true;
+  }
+
+  return {
+    hostname,
+    dns:Array.isArray(dnsServers) ? dnsServers : [],
+    interfaces:compact,
+    interface_count:entries.length,
+    interface_count_returned:selected.length,
+    address_count:addressCount,
+    address_count_returned:addressCountReturned,
+    interfaces_truncated:entries.length > selected.length,
+    addresses_truncated:addressesTruncated,
+  };
+}
+
 export async function networkTool(args) {
   const action = requireEnum(args.action || 'summary', 'action', ['summary','interfaces','dns','routes','listeners','test']);
   if (action === 'interfaces') return jsonResult(os.networkInterfaces());
   if (action === 'dns') return jsonResult({ servers:dns.getServers(), hostname:os.hostname() });
-  if (action === 'summary') return jsonResult({ hostname:os.hostname(), interfaces:os.networkInterfaces(), dns:dns.getServers() });
+  if (action === 'summary') return jsonResult(compactNetworkSummary());
   if (action === 'test') {
     const host = optionalString(args.host); if (!host) throw new Error('host is required for action=test');
     return jsonResult(await connectivityTest(host, clamp(args.port, 443, 1, 65535), clamp(args.timeout_ms, 3000, 100, 30_000)));