@remcp/runtime 0.2.133 → 0.2.134

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.2.134 — 2026-10-02
+
+- `power_action delay_seconds` is bounded to 0–90 seconds in schema and runtime validation so a delayed destructive call cannot intentionally outlive the hosted ~110-second device-call lifetime.
+- Delayed power actions use the propagated MCP AbortSignal; cancellation clears the timer and stops before any OS lock/sleep/restart/shutdown command is sent.
+- A second cancellation check runs immediately before platform dispatch. Regression tests cover pre-cancelled, mid-delay-cancelled, and schema-bound behavior.
+- Runtime tool names remain unchanged; this is a safety/correctness tightening of the existing power tool.
+
 ## 0.2.133 — 2026-10-02
 
 - Explicit `computer_action type target=window` now keeps top-level window selectors separate from semantic element selectors; `window_id` is never rewritten into the UI-element `id` before `type_text`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remcp/runtime",
-  "version": "0.2.133",
+  "version": "0.2.134",
   "description": "First-party ReMCP local device runtime: filesystem, terminal, computer-use, browser, diagnostics and document tools over MCP.",
   "type": "module",
   "license": "MIT",

package/src/extended/catalog.mjs

@@ -656,7 +656,7 @@ export const extendedToolDefinitions = [
   define('installed_apps', 'Installed applications', 'Inventory installed applications or packages with versions and publishers where available using native package/application inventories.', o({ filter:s('Name substring.'), limit:n('Maximum results; default 1000.') }), readOnly, diagnosticHandlers.installed_apps, ['apps']),
   define('environment', 'Runtime environment', 'Report platform, architecture, Node version, working/home/temp paths, shell, PATH, and optionally environment variables. Environment variables are opt-in and secret-looking or credential-bearing values are masked.', o({ include_env:b('Include sanitized environment variables; default false.') }), readOnly, diagnosticHandlers.environment),
   define('audio', 'Audio control', 'Read or change default output volume or mute state using native operating-system audio controls when available.', o({ action:e(['status','set_volume','mute','unmute']), volume:n('0..100 for set_volume.') }, ['action']), mutatingNonDestructive, diagnosticHandlers.audio, ['audio']),
-  define('power_action', 'Power action', 'Lock, sleep, restart, or shut down the paired computer using native operating-system power facilities. The action passes through ReMCP command policy.', o({ action:e(['lock','sleep','restart','shutdown']), delay_seconds:n('Optional delay, maximum 3600 seconds.') }, ['action']), mutating, diagnosticHandlers.power_action, ['power']),
+  define('power_action', 'Power action', 'Lock, sleep, restart, or shut down the paired computer using native operating-system power facilities. The action passes through ReMCP command policy. Delayed actions are cancelled if the client stops waiting.', o({ action:e(['lock','sleep','restart','shutdown']), delay_seconds:{ type:'number', minimum:0, maximum:90, description:'Optional delay in seconds, maximum 90. Longer delays are rejected because hosted calls expire before they can complete safely.' } }, ['action']), mutating, diagnosticHandlers.power_action, ['power']),
   define('record_screen', 'Record screen', 'Record a short bounded desktop video to a permitted local file for debugging and return its path and size. Uses native/available recording helpers.', o({ duration_seconds:n('1..120 seconds.'), fps:n('1..60.'), destination:s('Permitted output path. If an extension is supplied, use .webm for native GNOME Wayland recording and .mp4 for the other recorder backends.') }), mutating, diagnosticHandlers.record_screen, ['record']),
 
   define('read_document', 'Read document', 'Read PDF, DOCX, XLSX, TXT, Markdown, CSV, JSON, or XML. PDF/DOCX extraction is built in and XLSX is parsed from its OOXML worksheet cells.', o({ path:s('Document path.'), sheet:s('Worksheet name for XLSX.'), max_cells:n() }, ['path']), readOnly, documentHandlers.read_document, ['documents']),

package/src/extended/diagnostics.mjs

@@ -9,7 +9,7 @@ import { lstat, mkdtemp, open, rename, rm, stat, unlink, writeFile } from 'node:
 import { assertAllowedCommand } from '../policy.mjs';
 import { isWaylandSession } from '../screenshot-portal.mjs';
 import { openDirectoryPath } from '../tools/files.mjs';
-import { resolveSafePath, text } from '../util.mjs';
+import { resolveSafePath, text, throwIfCancelled, ToolError } from '../util.mjs';
 import {
   clamp,
   commandExists,
@@ -408,11 +408,45 @@ export async function audioTool(args) {
   unavailable('Audio control', 'wpctl, pactl or amixer is required on Linux');
 }
 
-export async function powerAction(args) {
+export const POWER_ACTION_MAX_DELAY_SECONDS = 90;
+
+export function normalizePowerActionDelay(value) {
+  if (value === undefined || value === null || value === '') return 0;
+  const delay = Number(value);
+  if (!Number.isFinite(delay) || delay < 0 || delay > POWER_ACTION_MAX_DELAY_SECONDS) {
+    throw new Error(`delay_seconds must be between 0 and ${POWER_ACTION_MAX_DELAY_SECONDS}`);
+  }
+  return delay;
+}
+
+export async function waitForPowerActionDelay(delaySeconds, signal) {
+  throwIfCancelled(signal);
+  if (delaySeconds <= 0) return;
+
+  await new Promise((resolve, reject) => {
+    let settled = false;
+    const finish = (fn, value) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      signal?.removeEventListener?.('abort', onAbort);
+      fn(value);
+    };
+    const onAbort = () => finish(reject, new ToolError('Cancelled by the client; power action was not executed.'));
+    const timer = setTimeout(() => finish(resolve), delaySeconds * 1000);
+    if (signal?.aborted) onAbort();
+    else signal?.addEventListener?.('abort', onAbort, { once:true });
+  });
+
+  throwIfCancelled(signal);
+}
+
+export async function powerAction(args, extra = {}) {
   const action = requireEnum(args.action, 'action', ['lock','sleep','restart','shutdown']);
   const policy = assertAllowedCommand(action === 'restart' ? 'reboot' : action === 'shutdown' ? 'shutdown' : action);
-  const delay = clamp(args.delay_seconds, 0, 0, 3600);
-  if (delay) await new Promise(resolve => setTimeout(resolve, delay * 1000));
+  const delay = normalizePowerActionDelay(args.delay_seconds);
+  await waitForPowerActionDelay(delay, extra.signal);
+  throwIfCancelled(extra.signal);
   if (process.platform === 'win32') {
     if (action === 'lock') await runPowerShell('rundll32.exe user32.dll,LockWorkStation', { label:'lock workstation' });
     else if (action === 'sleep') await runPowerShell('rundll32.exe powrprof.dll,SetSuspendState 0,1,0', { label:'sleep workstation' });