@remcp/runtime 0.2.132 → 0.2.134

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # Changelog
 
+## 0.2.134 — 2026-10-02
+
+- `power_action delay_seconds` is bounded to 0–90 seconds in schema and runtime validation so a delayed destructive call cannot intentionally outlive the hosted ~110-second device-call lifetime.
+- Delayed power actions use the propagated MCP AbortSignal; cancellation clears the timer and stops before any OS lock/sleep/restart/shutdown command is sent.
+- A second cancellation check runs immediately before platform dispatch. Regression tests cover pre-cancelled, mid-delay-cancelled, and schema-bound behavior.
+- Runtime tool names remain unchanged; this is a safety/correctness tightening of the existing power tool.
+
+## 0.2.133 — 2026-10-02
+
+- Explicit `computer_action type target=window` now keeps top-level window selectors separate from semantic element selectors; `window_id` is never rewritten into the UI-element `id` before `type_text`.
+- Auto window fallback uses the same sanitized window-only selector shape, preventing stale UI/browser selectors from hijacking window-scoped text entry.
+- Live GNOME/AT-SPI Zenity validation returned the exact Unicode payload after the accessibility edit path. Runtime tool names and schemas are unchanged from 0.2.132.
+
 ## 0.2.132 — 2026-10-02
 
 - `computer_action` now exposes `type`, `scroll`, `drag`, and `target=window` in its MCP schema while keeping specialist tools available when the backend is already known.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remcp/runtime",
-  "version": "0.2.132",
+  "version": "0.2.134",
   "description": "First-party ReMCP local device runtime: filesystem, terminal, computer-use, browser, diagnostics and document tools over MCP.",
   "type": "module",
   "license": "MIT",

package/src/extended/catalog.mjs

@@ -656,7 +656,7 @@ export const extendedToolDefinitions = [
   define('installed_apps', 'Installed applications', 'Inventory installed applications or packages with versions and publishers where available using native package/application inventories.', o({ filter:s('Name substring.'), limit:n('Maximum results; default 1000.') }), readOnly, diagnosticHandlers.installed_apps, ['apps']),
   define('environment', 'Runtime environment', 'Report platform, architecture, Node version, working/home/temp paths, shell, PATH, and optionally environment variables. Environment variables are opt-in and secret-looking or credential-bearing values are masked.', o({ include_env:b('Include sanitized environment variables; default false.') }), readOnly, diagnosticHandlers.environment),
   define('audio', 'Audio control', 'Read or change default output volume or mute state using native operating-system audio controls when available.', o({ action:e(['status','set_volume','mute','unmute']), volume:n('0..100 for set_volume.') }, ['action']), mutatingNonDestructive, diagnosticHandlers.audio, ['audio']),
-  define('power_action', 'Power action', 'Lock, sleep, restart, or shut down the paired computer using native operating-system power facilities. The action passes through ReMCP command policy.', o({ action:e(['lock','sleep','restart','shutdown']), delay_seconds:n('Optional delay, maximum 3600 seconds.') }, ['action']), mutating, diagnosticHandlers.power_action, ['power']),
+  define('power_action', 'Power action', 'Lock, sleep, restart, or shut down the paired computer using native operating-system power facilities. The action passes through ReMCP command policy. Delayed actions are cancelled if the client stops waiting.', o({ action:e(['lock','sleep','restart','shutdown']), delay_seconds:{ type:'number', minimum:0, maximum:90, description:'Optional delay in seconds, maximum 90. Longer delays are rejected because hosted calls expire before they can complete safely.' } }, ['action']), mutating, diagnosticHandlers.power_action, ['power']),
   define('record_screen', 'Record screen', 'Record a short bounded desktop video to a permitted local file for debugging and return its path and size. Uses native/available recording helpers.', o({ duration_seconds:n('1..120 seconds.'), fps:n('1..60.'), destination:s('Permitted output path. If an extension is supplied, use .webm for native GNOME Wayland recording and .mp4 for the other recorder backends.') }), mutating, diagnosticHandlers.record_screen, ['record']),
 
   define('read_document', 'Read document', 'Read PDF, DOCX, XLSX, TXT, Markdown, CSV, JSON, or XML. PDF/DOCX extraction is built in and XLSX is parsed from its OOXML worksheet cells.', o({ path:s('Document path.'), sheet:s('Worksheet name for XLSX.'), max_cells:n() }, ['path']), readOnly, documentHandlers.read_document, ['documents']),

package/src/extended/desktop.mjs

@@ -1291,6 +1291,24 @@ function browserComputerAction(args, action) {
   });
 }
 
+export function computerActionWindowTextArgs(args = {}) {
+  const {
+    id: _id,
+    label: _label,
+    name: _name,
+    role: _role,
+    automation_id: _automationId,
+    automationId: _automationIdAlias,
+    selector: _selector,
+    browser_text: _browserText,
+    ...windowArgs
+  } = args;
+  return {
+    ...windowArgs,
+    ...(args.window_title && !args.title ? { title:args.window_title } : {}),
+  };
+}
+
 export async function computerAction(args = {}) {
   const legacy = ['ui','pointer','window','type','keyboard','scroll','drag','clipboard','launch_app','open_path','reveal_path','notification'];
   const universal = [
@@ -1376,13 +1394,14 @@ export async function computerAction(args = {}) {
     ...(args.window_id ? { id:args.window_id } : {}),
     ...(args.window_title && !args.title ? { title:args.window_title } : {}),
   });
+  const windowTextTarget = () => computerActionWindowTextArgs(args);
 
   if (action === 'type') {
     if (target === 'browser') return browserComputerAction(args, 'type');
     if (target === 'ocr' || target === 'coordinates') {
       throw new Error('computer_action type requires a native UI, browser, or window target');
     }
-    if (target === 'window') return typeText(windowTarget());
+    if (target === 'window') return typeText(windowTextTarget());
     if (!automatic) return typeText({ ...args, method:args.method || 'accessibility' });
 
     const failures = [];
@@ -1399,7 +1418,7 @@ export async function computerAction(args = {}) {
       }
     }
     if (args.window_id || args.pid != null || args.app || args.window_title || args.title) {
-      try { return await typeText(windowTarget()); }
+      try { return await typeText(windowTextTarget()); }
       catch (error) { failures.push(`window: ${String(error?.message || error).slice(0, 300)}`); }
     }
     if (failures.length) throw new Error(`computer_action type targeting failed: ${failures.join('; ')}`);

package/src/extended/diagnostics.mjs

@@ -9,7 +9,7 @@ import { lstat, mkdtemp, open, rename, rm, stat, unlink, writeFile } from 'node:
 import { assertAllowedCommand } from '../policy.mjs';
 import { isWaylandSession } from '../screenshot-portal.mjs';
 import { openDirectoryPath } from '../tools/files.mjs';
-import { resolveSafePath, text } from '../util.mjs';
+import { resolveSafePath, text, throwIfCancelled, ToolError } from '../util.mjs';
 import {
   clamp,
   commandExists,
@@ -408,11 +408,45 @@ export async function audioTool(args) {
   unavailable('Audio control', 'wpctl, pactl or amixer is required on Linux');
 }
 
-export async function powerAction(args) {
+export const POWER_ACTION_MAX_DELAY_SECONDS = 90;
+
+export function normalizePowerActionDelay(value) {
+  if (value === undefined || value === null || value === '') return 0;
+  const delay = Number(value);
+  if (!Number.isFinite(delay) || delay < 0 || delay > POWER_ACTION_MAX_DELAY_SECONDS) {
+    throw new Error(`delay_seconds must be between 0 and ${POWER_ACTION_MAX_DELAY_SECONDS}`);
+  }
+  return delay;
+}
+
+export async function waitForPowerActionDelay(delaySeconds, signal) {
+  throwIfCancelled(signal);
+  if (delaySeconds <= 0) return;
+
+  await new Promise((resolve, reject) => {
+    let settled = false;
+    const finish = (fn, value) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      signal?.removeEventListener?.('abort', onAbort);
+      fn(value);
+    };
+    const onAbort = () => finish(reject, new ToolError('Cancelled by the client; power action was not executed.'));
+    const timer = setTimeout(() => finish(resolve), delaySeconds * 1000);
+    if (signal?.aborted) onAbort();
+    else signal?.addEventListener?.('abort', onAbort, { once:true });
+  });
+
+  throwIfCancelled(signal);
+}
+
+export async function powerAction(args, extra = {}) {
   const action = requireEnum(args.action, 'action', ['lock','sleep','restart','shutdown']);
   const policy = assertAllowedCommand(action === 'restart' ? 'reboot' : action === 'shutdown' ? 'shutdown' : action);
-  const delay = clamp(args.delay_seconds, 0, 0, 3600);
-  if (delay) await new Promise(resolve => setTimeout(resolve, delay * 1000));
+  const delay = normalizePowerActionDelay(args.delay_seconds);
+  await waitForPowerActionDelay(delay, extra.signal);
+  throwIfCancelled(extra.signal);
   if (process.platform === 'win32') {
     if (action === 'lock') await runPowerShell('rundll32.exe user32.dll,LockWorkStation', { label:'lock workstation' });
     else if (action === 'sleep') await runPowerShell('rundll32.exe powrprof.dll,SetSuspendState 0,1,0', { label:'sleep workstation' });