@remcp/runtime 0.2.64 → 0.2.66

package/README.md

@@ -52,8 +52,8 @@ support and emits `notifications/tools/list_changed` when that capability set ch
 The hosted ReMCP endpoint adds eleven account/presentation tools — `list_devices`, `ping_device`,
 `who_am_i`, `create_pairing_command`, `get_recent_tool_calls`, `get_usage_statistics`,
 `get_configuration`, `render_file_preview`, `render_image_preview`, `render_terminal_preview`, and
-`rename_device` — for a 94-tool MCP Apps catalog. Plain MCP clients receive 91 tools because the
-three presentation-only render tools are omitted unless the UI extension is negotiated.
+`rename_device` — for a 94-tool MCP Apps catalog. Native-only deployments receive 91 tools because the
+three presentation-only render tools are disabled by configuration.
 
 `computer_snapshot` and `computer_action` keep OCR inside the compact high-level surface: when a local `tesseract` binary is available, snapshot can return bounded OCR text/boxes and click targeting can fall back through Accessibility → browser DOM/CDP → OCR → coordinates. OCR is optional and never adds another MCP tool or bundled OCR dependency.
 
@@ -73,9 +73,9 @@ A running device can advertise a smaller capability-aware subset; the runtime de
 agent forwards the refreshed tool names to the hosted relay. Browser/CDP tools are the primary dynamic
 example: they are enabled only while the runtime can use a supported loopback browser endpoint.
 
-The generated hosted reference covers the full **94-tool UI-capable surface**: 83 device tools,
-8 account/fleet tools, and 3 chat-presentation tools. Clients without MCP Apps negotiation receive
-the 91-tool native surface. See https://remcp.site/docs#tools and public `docs/TOOLS.md`.
+The generated hosted reference covers the full **94-tool production surface** with custom widgets enabled: 83 device tools,
+8 account/fleet tools, and 3 chat-presentation tools. Setting `REMCP_CUSTOM_WIDGETS_ENABLED=false` on the hosted server exposes
+the 91-tool native-only surface. See https://remcp.site/docs#tools and public `docs/TOOLS.md`.
 
 ## No approval staircase
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remcp/runtime",
-  "version": "0.2.64",
+  "version": "0.2.66",
   "description": "First-party ReMCP local device runtime: filesystem, terminal, computer-use, browser, diagnostics and document tools over MCP.",
   "type": "module",
   "license": "MIT",
@@ -28,8 +28,7 @@
     "@modelcontextprotocol/server": "^2.0.0"
   },
   "devDependencies": {
-    "@modelcontextprotocol/client": "^2.0.0",
-    "@modelcontextprotocol/sdk": "^1.30.0"
+    "@modelcontextprotocol/client": "^2.0.0"
   },
   "repository": {
     "type": "git",

package/src/tools/terminal.mjs

@@ -17,7 +17,7 @@ import {
   waitForProcessExit,
   waitForProcessActivity,
 } from '../sessions.mjs';
-import { clampInteger, fail, requireInteger, requireString, structured, text } from '../util.mjs';
+import { clampInteger, fail, requireInteger, requireString, structured, text, truncate } from '../util.mjs';
 
 function shellCommand() {
   if (runtimeConfig.defaultShell) return runtimeConfig.defaultShell;
@@ -51,6 +51,21 @@ function throwIfAborted(signal) {
   if (signal?.aborted) throw abortError();
 }
 
+// Terminal results have strict tool-specific output schemas. The generic structured() helper uses a
+// schema-agnostic {truncated,bytes,preview} envelope above 256 KiB, which is valid for extended
+// free-form tools but invalid for start_process/read_process_output and friends. Bound the few
+// potentially large terminal strings before mirroring them so structuredContent always keeps the
+// declared terminal shape.
+function terminalStructured(value, fallbackText) {
+  const bounded = { ...value };
+  if (typeof bounded.output === 'string') bounded.output = truncate(bounded.output, 128 * 1024);
+  if (typeof bounded.partial === 'string') bounded.partial = truncate(bounded.partial, 64 * 1024);
+  if (typeof bounded.command === 'string') bounded.command = truncate(bounded.command, 16 * 1024);
+  if (typeof bounded.warning === 'string') bounded.warning = truncate(bounded.warning, 8 * 1024);
+  if (typeof bounded.pattern === 'string') bounded.pattern = truncate(bounded.pattern, 16 * 1024);
+  return structured(bounded, fallbackText);
+}
+
 export async function startProcessTool(args, extra = {}) {
   const command = requireString(args.command, 'command');
   const verdict = assertAllowedCommand(command);
@@ -101,7 +116,7 @@ export async function startProcessTool(args, extra = {}) {
   const warning = verdict.note ? String(verdict.note) : '';
   const rendered = [warning, headline, output, partial].filter(Boolean).join('\n');
   const status = describeSession(session);
-  return structured({
+  return terminalStructured({
     ...status,
     command,
     output,
@@ -141,7 +156,7 @@ export async function readProcessOutputTool(args, extra = {}) {
   const status = describeSession(session);
   const header = `pid ${pid} ${status.status} · lines ${range}`;
   const output = slice.join('\n');
-  return structured({
+  return terminalStructured({
     ...status,
     range,
     output,
@@ -187,7 +202,7 @@ export async function waitForProcessOutputTool(args, extra = {}) {
     ? `pid ${pid} ${status.status} · pattern matched${bufferedMatch ? ' (already buffered)' : ''}`
     : `pid ${pid} ${status.status} · pattern not matched within ${timeoutMs}ms`;
   const output = slice.join('\n');
-  return structured({
+  return terminalStructured({
     ...status,
     pattern,
     matched,
@@ -226,7 +241,7 @@ export async function interactWithProcessTool(args, extra = {}) {
   const slice = readNewOutput(session);
   const status = describeSession(session);
   const output = slice.join('\n');
-  return structured({
+  return terminalStructured({
     ...status,
     output,
   }, [`pid ${pid} ${status.status}`, output].filter(Boolean).join('\n'));
@@ -238,7 +253,7 @@ export async function forceTerminateTool(args) {
   if (!session) fail(`No ReMCP session with pid ${pid}`);
   if (session.exited) {
     const status = describeSession(session);
-    return structured({ ...status, terminated:false, alreadyExited:true, escalated:false }, `Process ${pid} already exited.`);
+    return terminalStructured({ ...status, terminated:false, alreadyExited:true, escalated:false }, `Process ${pid} already exited.`);
   }
   killSessionTree(session, 'SIGTERM');
   const deadline = Date.now() + 2000;
@@ -250,7 +265,7 @@ export async function forceTerminateTool(args) {
     await waitForProcessActivity(session, 1000);
   }
   const status = describeSession(session);
-  return structured(
+  return terminalStructured(
     { ...status, terminated:Boolean(session.exited), alreadyExited:false, escalated },
     `Terminated session ${pid}${status.status.startsWith('exited') ? '' : ' (still running)'}. Status: ${status.status}.`,
   );
@@ -263,11 +278,11 @@ export async function listSessionsTool() {
     const blocked = session.exited ? '' : session.partial ? 'blocked-possibly' : 'idle-or-running';
     return { ...status, blocked, command:session.command.slice(0, 120) };
   });
-  if (!facts.length) return structured({ sessions:[] }, 'No active terminal sessions.');
+  if (!facts.length) return terminalStructured({ sessions:[] }, 'No active terminal sessions.');
   const rows = facts.map(session =>
     `pid ${session.pid} · ${session.status} · ${Math.round(session.runtimeMs / 1000)}s · ${session.blocked} · ${session.command}`
   );
-  return structured({ sessions:facts }, rows.join('\n'));
+  return terminalStructured({ sessions:facts }, rows.join('\n'));
 }
 
 export const terminalToolHandlers = {