@remcp/runtime 0.2.135 → 0.2.136

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.2.136 — 2026-10-02
+
+- `installed_apps` now normalizes Windows registry, macOS `system_profiler`, `dpkg-query`, and `rpm` inventories into one structured `data[]` contract with stable app name/version/publisher/path fields.
+- Stable top-level `backend`, `count`, `returned`, and `truncated` metadata make result limits explicit and remove platform-specific text parsing from callers.
+- Name filtering and de-duplication are shared across platforms. Windows no longer interpolates the filter into PowerShell.
+- Public release CI exercises the live native inventory on Linux, macOS, and Windows. Tool names remain unchanged at 83; the output-schema digest changes intentionally.
+
 ## 0.2.135 — 2026-10-02
 
 - Linux `audio` status is normalized across `wpctl`, `pactl`, and `amixer` into structured `volume`, `muted`, `action`, and `backend` fields; mutating audio actions re-read and return the verified state.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remcp/runtime",
-  "version": "0.2.135",
+  "version": "0.2.136",
   "description": "First-party ReMCP local device runtime: filesystem, terminal, computer-use, browser, diagnostics and document tools over MCP.",
   "type": "module",
   "license": "MIT",

package/src/extended/catalog.mjs

@@ -212,7 +212,19 @@ const OUTPUT_FIELDS = Object.freeze({
   service: { data:outputArray(outputObject('Service record.')), action:outputString(), name:outputString(), text:outputString() },
   event_log: { text:outputString('Bounded log output.'), data:outputArray(outputObject()) },
   network: { hostname:outputString(), interfaces:outputObject(), dns:outputArray(outputString()), servers:outputArray(outputString()), host:outputString(), port:outputNumber(), ok:outputBoolean(), latency_ms:outputNumber(), interface_count:outputNumber(), interface_count_returned:outputNumber(), address_count:outputNumber(), address_count_returned:outputNumber(), interfaces_truncated:outputBoolean(), addresses_truncated:outputBoolean(), data:outputArray(outputObject()) },
-  installed_apps: { data:outputArray(outputObject('Installed app/package with name/version/path where available.')) },
+  installed_apps: {
+    data:outputArray(outputRecord({
+      name:outputString('Installed application/package name.'),
+      version:{ type:['string','null'], description:'Installed version when available.' },
+      publisher:{ type:['string','null'], description:'Publisher/maintainer/vendor when available.' },
+      path:{ type:['string','null'], description:'Installation path when available.' },
+      signed_by:outputString('Optional macOS signing identity summary.'),
+    }, 'Normalized installed app/package record.')),
+    backend:outputString('Native inventory backend used on this platform.'),
+    count:outputNumber('Total matching records before the requested limit.'),
+    returned:outputNumber('Number of records returned in data.'),
+    truncated:outputBoolean('True when count is larger than returned because of the requested limit.'),
+  },
   environment: { platform:outputString(), arch:outputString(), hostname:outputString(), release:outputString(), shell:outputString(), path:outputString(), node:outputString(), env:outputObject() },
   audio: { volume:outputNumber(), muted:outputBoolean(), action:outputString(), backend:outputString(), text:outputString() },
   power_action: { text:outputString(), action:outputString() },

package/src/extended/diagnostics.mjs

@@ -218,26 +218,90 @@ export async function networkTool(args) {
   unavailable('Listener inventory', 'ss or netstat is required');
 }
 
+function installedAppString(value) {
+  const normalized = value == null ? '' : String(value).trim();
+  return normalized || null;
+}
+
+export function normalizeInstalledApp(row = {}) {
+  const name = installedAppString(row.name ?? row.DisplayName ?? row._name);
+  if (!name) return null;
+  const signedBy = installedAppString(row.signed_by);
+  return {
+    name,
+    version:installedAppString(row.version ?? row.DisplayVersion),
+    publisher:installedAppString(row.publisher ?? row.Publisher),
+    path:installedAppString(row.path ?? row.InstallLocation),
+    ...(signedBy ? { signed_by:signedBy } : {}),
+  };
+}
+
+export function parseInstalledAppsTsv(output) {
+  return String(output || '').split(/\r?\n/).filter(Boolean).map(line => {
+    const [name = '', version = '', publisher = '', pathValue = ''] = line.split('\t');
+    return normalizeInstalledApp({ name, version, publisher, path:pathValue });
+  }).filter(Boolean);
+}
+
+export function installedAppsPayload(rows, { backend, filter = null, limit = 1000 } = {}) {
+  const wanted = optionalString(filter)?.toLowerCase() || null;
+  const boundedLimit = clamp(limit, 1000, 1, 10_000);
+  const seen = new Set();
+  const normalized = [];
+  for (const raw of Array.isArray(rows) ? rows : (rows ? [rows] : [])) {
+    const app = normalizeInstalledApp(raw);
+    if (!app) continue;
+    if (wanted && !app.name.toLowerCase().includes(wanted)) continue;
+    const key = [app.name.toLowerCase(), app.version || '', app.path || ''].join('\u0000');
+    if (seen.has(key)) continue;
+    seen.add(key);
+    normalized.push(app);
+  }
+  normalized.sort((left, right) => left.name.localeCompare(right.name, undefined, { sensitivity:'base' })
+    || String(left.version || '').localeCompare(String(right.version || ''), undefined, { sensitivity:'base' }));
+  const data = normalized.slice(0, boundedLimit);
+  return {
+    data,
+    backend:String(backend || 'unknown'),
+    count:normalized.length,
+    returned:data.length,
+    truncated:normalized.length > data.length,
+  };
+}
+
+export function windowsInstalledAppsPowerShell() {
+  return [
+    "$ErrorActionPreference='Stop'",
+    "$paths=@('HKLM:\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKLM:\\Software\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKCU:\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*')",
+    "$items=foreach($path in $paths){Get-ItemProperty -Path $path -ErrorAction SilentlyContinue}",
+    "$items|Where-Object{$_.DisplayName}|ForEach-Object{[PSCustomObject]@{name=[string]$_.DisplayName;version=[string]$_.DisplayVersion;publisher=[string]$_.Publisher;path=[string]$_.InstallLocation}}|ConvertTo-Json -Compress",
+  ].join(';');
+}
+
 export async function installedApps(args) {
   const limit = clamp(args.limit, 1000, 1, 10_000);
   const filter = optionalString(args.filter);
   if (process.platform === 'win32') {
-    const where = filter ? ` | Where-Object { $_.DisplayName -like '*${escapePowerShellSingle(filter)}*' }` : '';
-    const script = `$paths=@('HKLM:\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKLM:\\Software\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKCU:\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*');Get-ItemProperty $paths -ErrorAction SilentlyContinue${where}|Where-Object{$_.DisplayName}|Select-Object -First ${limit} DisplayName,DisplayVersion,Publisher,InstallLocation|Sort-Object DisplayName -Unique|ConvertTo-Json -Compress`;
-    return text((await runPowerShell(script, { label:'installed apps', timeout:30_000 })).stdout.trim() || '[]');
+    const { stdout } = await runPowerShell(windowsInstalledAppsPowerShell(), { label:'installed apps', timeout:30_000, maxBuffer:32*1024*1024 });
+    let parsed;
+    try {
+      parsed = JSON.parse(stdout.trim() || '[]');
+    } catch {
+      throw new Error('Windows installed-app inventory returned invalid JSON');
+    }
+    return jsonResult(installedAppsPayload(parsed, { backend:'windows-registry', filter, limit }));
   }
   if (process.platform === 'darwin') {
     const parsed = JSON.parse((await runFile('/usr/sbin/system_profiler', ['SPApplicationsDataType','-json'], { label:'installed apps', timeout:60_000, maxBuffer:64*1024*1024 })).stdout);
-    const apps = (parsed.SPApplicationsDataType || []).filter(app => !filter || String(app._name || '').toLowerCase().includes(filter.toLowerCase())).slice(0, limit);
-    return jsonResult(apps.map(app => ({ name:app._name, version:app.version || null, path:app.path || null, signed_by:app.signed_by || null })));
+    return jsonResult(installedAppsPayload(parsed.SPApplicationsDataType || [], { backend:'system_profiler', filter, limit }));
   }
   if (commandExists('dpkg-query')) {
     const { stdout } = await runFile('dpkg-query', ['-W','-f=${binary:Package}\t${Version}\t${Maintainer}\n'], { label:'installed apps', maxBuffer:32*1024*1024 });
-    return text(stdout.split('\n').filter(Boolean).filter(line => !filter || line.toLowerCase().includes(filter.toLowerCase())).slice(0, limit).join('\n'));
+    return jsonResult(installedAppsPayload(parseInstalledAppsTsv(stdout), { backend:'dpkg-query', filter, limit }));
   }
   if (commandExists('rpm')) {
     const { stdout } = await runFile('rpm', ['-qa','--qf','%{NAME}\t%{VERSION}-%{RELEASE}\t%{VENDOR}\n'], { label:'installed apps', maxBuffer:32*1024*1024 });
-    return text(stdout.split('\n').filter(Boolean).filter(line => !filter || line.toLowerCase().includes(filter.toLowerCase())).slice(0, limit).join('\n'));
+    return jsonResult(installedAppsPayload(parseInstalledAppsTsv(stdout), { backend:'rpm', filter, limit }));
   }
   unavailable('Installed application inventory', 'dpkg-query or rpm is required');
 }