@stackmemoryai/stackmemory 0.3.21 → 0.3.22

package/dist/integrations/mcp/tool-definitions-code.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/integrations/mcp/tool-definitions-code.ts"],
+  "sourcesContent": ["/**\n * Code Execution Tool Definitions for MCP Server\n */\n\nexport const codeExecutionTools = [\n  {\n    name: 'code.execute',\n    description: 'Execute Python, JavaScript, or TypeScript code in a sandboxed environment',\n    inputSchema: {\n      type: 'object',\n      properties: {\n        language: {\n          type: 'string',\n          enum: ['python', 'javascript', 'typescript'],\n          description: 'Programming language to execute',\n        },\n        code: {\n          type: 'string',\n          description: 'Code to execute',\n        },\n        workingDirectory: {\n          type: 'string',\n          description: 'Optional working directory for execution',\n        },\n        timeout: {\n          type: 'number',\n          description: 'Execution timeout in milliseconds (default: 30000)',\n        },\n        force: {\n          type: 'boolean',\n          description: 'Force execution even if code validation fails',\n        },\n      },\n      required: ['language', 'code'],\n    },\n  },\n  {\n    name: 'code.validate',\n    description: 'Validate code for potential security issues',\n    inputSchema: {\n      type: 'object',\n      properties: {\n        code: {\n          type: 'string',\n          description: 'Code to validate',\n        },\n      },\n      required: ['code'],\n    },\n  },\n  {\n    name: 'code.sandbox_status',\n    description: 'Get status of the code execution sandbox',\n    inputSchema: {\n      type: 'object',\n      properties: {},\n    },\n  },\n  {\n    name: 'code.clean_sandbox',\n    description: 'Clean temporary files from the sandbox',\n    inputSchema: {\n      type: 'object',\n      properties: {},\n    },\n  },\n];\n\n/**\n * Example of using code execution in restricted mode\n */\nexport const codeOnlyModeExample = `\n# When in code_only mode, Claude can ONLY execute code\n\n## Example Python execution:\n\\`\\`\\`python\nimport numpy as np\nimport matplotlib.pyplot as plt\n\n# Generate data\nx = np.linspace(0, 10, 100)\ny = np.sin(x)\n\n# Create visualization (won't display but will execute)\nplt.plot(x, y)\nplt.title('Sine Wave')\nplt.xlabel('X')\nplt.ylabel('Y')\n\n# Calculate statistics\nmean_y = np.mean(y)\nstd_y = np.std(y)\nprint(f\"Mean: {mean_y:.4f}\")\nprint(f\"Std: {std_y:.4f}\")\n\\`\\`\\`\n\n## Example JavaScript execution:\n\\`\\`\\`javascript\n// Process data\nconst data = Array.from({length: 10}, (_, i) => i ** 2);\n\n// Calculate sum\nconst sum = data.reduce((a, b) => a + b, 0);\nconsole.log('Sum of squares:', sum);\n\n// Async operation\nasync function fetchData() {\n  // Simulate API call\n  await new Promise(resolve => setTimeout(resolve, 100));\n  return { status: 'success', data: [1, 2, 3] };\n}\n\nfetchData().then(result => {\n  console.log('Async result:', result);\n});\n\\`\\`\\`\n\n## Benefits of code_only mode:\n1. Safe computational environment\n2. No file system modifications\n3. No network access\n4. Pure problem-solving focus\n5. Ideal for algorithms, data analysis, and mathematical computations\n`;"],
+  "mappings": "AAIO,MAAM,qBAAqB;AAAA,EAChC;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX,MAAM;AAAA,MACN,YAAY;AAAA,QACV,UAAU;AAAA,UACR,MAAM;AAAA,UACN,MAAM,CAAC,UAAU,cAAc,YAAY;AAAA,UAC3C,aAAa;AAAA,QACf;AAAA,QACA,MAAM;AAAA,UACJ,MAAM;AAAA,UACN,aAAa;AAAA,QACf;AAAA,QACA,kBAAkB;AAAA,UAChB,MAAM;AAAA,UACN,aAAa;AAAA,QACf;AAAA,QACA,SAAS;AAAA,UACP,MAAM;AAAA,UACN,aAAa;AAAA,QACf;AAAA,QACA,OAAO;AAAA,UACL,MAAM;AAAA,UACN,aAAa;AAAA,QACf;AAAA,MACF;AAAA,MACA,UAAU,CAAC,YAAY,MAAM;AAAA,IAC/B;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX,MAAM;AAAA,MACN,YAAY;AAAA,QACV,MAAM;AAAA,UACJ,MAAM;AAAA,UACN,aAAa;AAAA,QACf;AAAA,MACF;AAAA,MACA,UAAU,CAAC,MAAM;AAAA,IACnB;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX,MAAM;AAAA,MACN,YAAY,CAAC;AAAA,IACf;AAAA,EACF;AAAA,EACA;AAAA,IACE,MAAM;AAAA,IACN,aAAa;AAAA,IACb,aAAa;AAAA,MACX,MAAM;AAAA,MACN,YAAY,CAAC;AAAA,IACf;AAAA,EACF;AACF;AAKO,MAAM,sBAAsB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;",
+  "names": []
+}

package/dist/servers/railway/index.js

@@ -248,7 +248,7 @@ class RailwayMCPServer {
         for (const q of queries) {
           try {
             await this.pgPool.query(q);
-          } catch (e2) {
+          } catch (e) {
           }
         }
         await this.pgPool.query("INSERT INTO railway_schema_version (version, description) VALUES ($1, $2) ON CONFLICT (version) DO NOTHING", [version, description]);
@@ -331,10 +331,13 @@ class RailwayMCPServer {
         if (this.pgPool) {
           await this.pgPool.query("DELETE FROM admin_sessions WHERE expires_at <= NOW()");
         } else if (this.db) {
-          this.db.prepare('DELETE FROM admin_sessions WHERE datetime(expires_at) <= datetime("now")').run();
+          const tableExists = this.db.prepare(`SELECT name FROM sqlite_master WHERE type='table' AND name='admin_sessions'`).get();
+          if (tableExists) {
+            this.db.prepare('DELETE FROM admin_sessions WHERE datetime(expires_at) <= datetime("now")').run();
+          }
         }
-      } catch {
-        console.warn("Admin session cleanup failed:", e);
+      } catch (error) {
+        console.warn("Admin session cleanup failed:", error);
       }
     };
     run();
@@ -359,7 +362,7 @@ class RailwayMCPServer {
     }
   }
   async authenticate(req, res, next) {
-    if (req.path === "/health" || req.path === "/health/db") {
+    if (req.path === "/health" || req.path === "/api/health" || req.path === "/health/db") {
       return next();
     }
     const authHeader = req.headers.authorization;
@@ -375,8 +378,8 @@ class RailwayMCPServer {
         }
         req.user = valid;
         return next();
-      } catch (e2) {
-        return res.status(500).json({ error: e2.message || "Auth error" });
+      } catch (e) {
+        return res.status(500).json({ error: e.message || "Auth error" });
       }
     }
     if (config.authMode === "jwt" && process.env["AUTH0_DOMAIN"]) {
@@ -448,7 +451,7 @@ class RailwayMCPServer {
     next();
   }
   setupRoutes() {
-    this.app.get("/health", (req, res) => {
+    const healthHandler = (req, res) => {
       const health = {
         status: "healthy",
         version: "1.0.0",
@@ -457,7 +460,9 @@ class RailwayMCPServer {
         environment: config.environment
       };
       res.json(health);
-    });
+    };
+    this.app.get("/health", healthHandler);
+    this.app.get("/api/health", healthHandler);
     this.app.get("/", (req, res) => {
       res.json({
         name: "StackMemory Railway Server",
@@ -599,7 +604,6 @@ class RailwayMCPServer {
               [apiKeyHash, keyResult.rows[0].id]
             );
           }
-          const databaseUrl = process.env.DATABASE_URL;
         } else {
           const keyRow = this.db.prepare(
             "SELECT id FROM api_keys WHERE user_id = ? AND revoked = 0 LIMIT 1"
@@ -691,7 +695,7 @@ class RailwayMCPServer {
         res.status(500).json({ error: error.message });
       }
     });
-    const parseCookies2 = (cookieHeader) => {
+    const parseCookies = (cookieHeader) => {
       const out = {};
       if (!cookieHeader) return out;
       cookieHeader.split(";").forEach((p) => {
@@ -700,15 +704,15 @@ class RailwayMCPServer {
       });
       return out;
     };
-    const setJwtCookie2 = (res, token) => {
+    const setJwtCookie = (res, token) => {
       const flags = ["Path=/", "HttpOnly", "SameSite=Lax"];
       if (process.env["NODE_ENV"] === "production") flags.push("Secure");
       res.setHeader("Set-Cookie", `sm_admin_jwt=${encodeURIComponent(token)}; ${flags.join("; ")}`);
     };
-    const clearJwtCookie2 = (res) => {
+    const clearJwtCookie = (res) => {
       res.setHeader("Set-Cookie", "sm_admin_jwt=; Path=/; HttpOnly; Max-Age=0; SameSite=Lax");
     };
-    const verifyAdminJwt2 = (token) => {
+    const verifyAdminJwt = (token) => {
       try {
         const secret = process.env["ADMIN_JWT_SECRET"] || "dev-admin-secret";
         const payload = jwt.verify(token, secret);
@@ -728,10 +732,10 @@ class RailwayMCPServer {
     const requireAdmin = (req, res, next) => {
       const user = req.user || {};
       if (user.role === "admin") return next();
-      const cookies = parseCookies2(req.headers.cookie);
+      const cookies = parseCookies(req.headers.cookie);
       const t = cookies["sm_admin_jwt"];
       if (t) {
-        const verified = verifyAdminJwt2(t);
+        const verified = verifyAdminJwt(t);
         if (verified) {
           checkDbSession(verified.jti).then((ok) => {
             if (ok) return next();
@@ -764,8 +768,8 @@ class RailwayMCPServer {
         }
         const rows = this.db.prepare("SELECT id, name, is_public, created_at, updated_at FROM projects ORDER BY updated_at DESC").all();
         return res.json({ projects: rows });
-      } catch (e2) {
-        res.status(500).json({ error: e2.message });
+      } catch (e) {
+        res.status(500).json({ error: e.message });
       }
     });
     this.app.post("/admin/api/projects", requireAdmin, async (req, res) => {
@@ -778,8 +782,8 @@ class RailwayMCPServer {
         }
         this.db.prepare("INSERT OR IGNORE INTO projects (id, name, is_public) VALUES (?, ?, ?)").run(id, name || id, isPublic ? 1 : 0);
         return res.json({ success: true });
-      } catch (e2) {
-        res.status(500).json({ error: e2.message });
+      } catch (e) {
+        res.status(500).json({ error: e.message });
       }
     });
     this.app.patch("/admin/api/projects/:id/visibility", requireAdmin, async (req, res) => {
@@ -793,8 +797,8 @@ class RailwayMCPServer {
         }
         this.db.prepare("UPDATE projects SET is_public = ?, updated_at = CURRENT_TIMESTAMP WHERE id = ?").run(isPublic ? 1 : 0, pid);
         return res.json({ success: true });
-      } catch (e2) {
-        res.status(500).json({ error: e2.message });
+      } catch (e) {
+        res.status(500).json({ error: e.message });
       }
     });
     this.app.get("/admin/api/projects/:id/members", requireAdmin, async (req, res) => {
@@ -809,8 +813,8 @@ class RailwayMCPServer {
         }
         const stmt = this.db.prepare("SELECT pm.user_id, pm.role, u.email, u.name FROM project_members pm LEFT JOIN users u ON u.id = pm.user_id WHERE pm.project_id = ? ORDER BY pm.role");
         return res.json({ members: stmt.all(pid) });
-      } catch (e2) {
-        res.status(500).json({ error: e2.message });
+      } catch (e) {
+        res.status(500).json({ error: e.message });
       }
     });
     this.app.put("/admin/api/projects/:id/members", requireAdmin, async (req, res) => {
@@ -829,8 +833,8 @@ class RailwayMCPServer {
         }
         this.db.prepare("INSERT INTO project_members (project_id, user_id, role) VALUES (?, ?, ?) ON CONFLICT(project_id, user_id) DO UPDATE SET role = ?").run(pid, userId, role, role);
         return res.json({ success: true });
-      } catch (e2) {
-        res.status(500).json({ error: e2.message });
+      } catch (e) {
+        res.status(500).json({ error: e.message });
       }
     });
     this.app.delete("/admin/api/projects/:id/members/:userId", requireAdmin, async (req, res) => {
@@ -843,8 +847,8 @@ class RailwayMCPServer {
         }
         this.db.prepare("DELETE FROM project_members WHERE project_id = ? AND user_id = ?").run(pid, uid);
         return res.json({ success: true });
-      } catch (e2) {
-        res.status(500).json({ error: e2.message });
+      } catch (e) {
+        res.status(500).json({ error: e.message });
       }
     });
     this.app.get("/admin/api/sessions", requireAdmin, async (_req, res) => {
@@ -855,8 +859,8 @@ class RailwayMCPServer {
         }
         const rows = this.db.prepare("SELECT id, user_id, created_at, expires_at, user_agent, ip FROM admin_sessions ORDER BY created_at DESC").all();
         return res.json({ sessions: rows });
-      } catch (e2) {
-        res.status(500).json({ error: e2.message });
+      } catch (e) {
+        res.status(500).json({ error: e.message });
       }
     });
     this.app.delete("/admin/api/sessions/:id", requireAdmin, async (req, res) => {
@@ -868,13 +872,13 @@ class RailwayMCPServer {
           this.db.prepare("DELETE FROM admin_sessions WHERE id = ?").run(id);
         }
         res.json({ success: true });
-      } catch (e2) {
-        res.status(500).json({ error: e2.message });
+      } catch (e) {
+        res.status(500).json({ error: e.message });
       }
     });
     this.app.post("/admin/api/sessions/refresh", requireAdmin, async (req, res) => {
       try {
-        const cookies = parseCookies2(req.headers.cookie);
+        const cookies = parseCookies(req.headers.cookie);
         const t = cookies["sm_admin_jwt"];
         if (!t) return res.status(400).json({ error: "No session" });
         const secret = process.env["ADMIN_JWT_SECRET"] || "dev-admin-secret";
@@ -892,7 +896,8 @@ class RailwayMCPServer {
           } else {
             this.db.prepare("DELETE FROM admin_sessions WHERE id = ?").run(oldJti);
           }
-        } catch {
+        } catch (error) {
+          console.warn("Failed to delete session during refresh:", error);
         }
         const jti = Math.random().toString(36).slice(2) + Math.random().toString(36).slice(2);
         const hours = parseInt(process.env["ADMIN_SESSION_HOURS"] || "8", 10);
@@ -910,8 +915,8 @@ class RailwayMCPServer {
         if (process.env["NODE_ENV"] === "production") flags.push("Secure");
         res.setHeader("Set-Cookie", `sm_admin_jwt=${encodeURIComponent(token)}; ${flags.join("; ")}`);
         return res.json({ success: true });
-      } catch (e2) {
-        res.status(500).json({ error: e2.message });
+      } catch (e) {
+        res.status(500).json({ error: e.message });
       }
     });
     this.app.get("/admin", requireAdmin, (req, res) => {
@@ -1063,6 +1068,63 @@ loadSessions();
         }
       });
     }
+    this.app.get("/admin/login", (_req, res) => {
+      res.setHeader("Content-Type", "text/html");
+      res.send(`<!doctype html><html><head><meta charset="utf-8"/><title>Admin Login</title>
+<style>body{font-family:system-ui;margin:40px} input{padding:8px;margin:4px} button{padding:8px}</style></head>
+<body><h3>Admin Login</h3>
+<p>Paste an admin API key to manage projects and members.</p>
+<form method="POST" action="/admin/login">
+  <input type="password" name="apiKey" placeholder="sk-..." style="min-width:360px" required/>
+  <div><button type="submit">Login</button></div>
+  <p style="color:#666">Your key is validated server-side and not stored in the browser; a short-lived session cookie is created.</p>
+</form>
+</body></html>`);
+    });
+    this.app.post("/admin/login", express.urlencoded({ extended: false }), async (req, res) => {
+      try {
+        const apiKey = req.body?.apiKey || "";
+        if (!apiKey) return res.status(400).send("Missing API key");
+        const u = await this.validateApiKey(apiKey);
+        if (!u || u.role !== "admin") return res.status(403).send("Not an admin API key");
+        const jti = Math.random().toString(36).slice(2) + Math.random().toString(36).slice(2);
+        const hours = parseInt(process.env["ADMIN_SESSION_HOURS"] || "8", 10);
+        const expMs = Date.now() + hours * 3600 * 1e3;
+        const expDateIso = new Date(expMs).toISOString();
+        const ua = req.headers["user-agent"] || "";
+        const ip = req.headers["x-forwarded-for"] || req.socket.remoteAddress || "";
+        if (this.pgPool) {
+          await this.pgPool.query("INSERT INTO admin_sessions (id, user_id, expires_at, user_agent, ip) VALUES ($1, $2, $3, $4, $5)", [jti, u.id, expDateIso, ua, ip]);
+        } else {
+          this.db.prepare("INSERT INTO admin_sessions (id, user_id, expires_at, user_agent, ip) VALUES (?, ?, ?, ?, ?)").run(jti, u.id, expDateIso, ua, ip);
+        }
+        const token = jwt.sign({ sub: u.id, role: "admin", jti }, process.env["ADMIN_JWT_SECRET"] || "dev-admin-secret", { expiresIn: hours + "h" });
+        setJwtCookie(res, token);
+        res.redirect("/admin");
+      } catch (e) {
+        res.status(500).send("Login failed");
+      }
+    });
+    this.app.get("/admin/logout", async (req, res) => {
+      const cookies = parseCookies(req.headers.cookie);
+      const t = cookies["sm_admin_jwt"];
+      if (t) {
+        const verified = verifyAdminJwt(t);
+        if (verified) {
+          try {
+            if (this.pgPool) {
+              await this.pgPool.query("DELETE FROM admin_sessions WHERE id = $1", [verified.jti]);
+            } else {
+              this.db.prepare("DELETE FROM admin_sessions WHERE id = ?").run(verified.jti);
+            }
+          } catch (error) {
+            console.warn("Failed to delete session during logout:", error);
+          }
+        }
+      }
+      clearJwtCookie(res);
+      res.redirect("/admin/login");
+    });
   }
   setupWebSocket() {
     this.wss = new WebSocketServer({
@@ -1280,60 +1342,4 @@ process.on("SIGINT", () => {
   console.log("Shutting down...");
   process.exit(0);
 });
-(void 0).app.get("/admin/login", (_req, res) => {
-  res.setHeader("Content-Type", "text/html");
-  res.send(`<!doctype html><html><head><meta charset="utf-8"/><title>Admin Login</title>
-<style>body{font-family:system-ui;margin:40px} input{padding:8px;margin:4px} button{padding:8px}</style></head>
-<body><h3>Admin Login</h3>
-<p>Paste an admin API key to manage projects and members.</p>
-<form method="POST" action="/admin/login">
-  <input type="password" name="apiKey" placeholder="sk-..." style="min-width:360px" required/>
-  <div><button type="submit">Login</button></div>
-  <p style="color:#666">Your key is validated server-side and not stored in the browser; a short-lived session cookie is created.</p>
-</form>
-</body></html>`);
-});
-(void 0).app.post("/admin/login", express.urlencoded({ extended: false }), async (req, res) => {
-  try {
-    const apiKey = req.body?.apiKey || "";
-    if (!apiKey) return res.status(400).send("Missing API key");
-    const u = await (void 0).validateApiKey(apiKey);
-    if (!u || u.role !== "admin") return res.status(403).send("Not an admin API key");
-    const jti = Math.random().toString(36).slice(2) + Math.random().toString(36).slice(2);
-    const hours = parseInt(process.env["ADMIN_SESSION_HOURS"] || "8", 10);
-    const expMs = Date.now() + hours * 3600 * 1e3;
-    const expDateIso = new Date(expMs).toISOString();
-    const ua = req.headers["user-agent"] || "";
-    const ip = req.headers["x-forwarded-for"] || req.socket.remoteAddress || "";
-    if ((void 0).pgPool) {
-      await (void 0).pgPool.query("INSERT INTO admin_sessions (id, user_id, expires_at, user_agent, ip) VALUES ($1, $2, $3, $4, $5)", [jti, u.id, expDateIso, ua, ip]);
-    } else {
-      (void 0).db.prepare("INSERT INTO admin_sessions (id, user_id, expires_at, user_agent, ip) VALUES (?, ?, ?, ?, ?)").run(jti, u.id, expDateIso, ua, ip);
-    }
-    const token = jwt.sign({ sub: u.id, role: "admin", jti }, process.env["ADMIN_JWT_SECRET"] || "dev-admin-secret", { expiresIn: hours + "h" });
-    setJwtCookie(res, token);
-    res.redirect("/admin");
-  } catch (e2) {
-    res.status(500).send("Login failed");
-  }
-});
-(void 0).app.get("/admin/logout", async (req, res) => {
-  const cookies = parseCookies(req.headers.cookie);
-  const t = cookies["sm_admin_jwt"];
-  if (t) {
-    const verified = verifyAdminJwt(t);
-    if (verified) {
-      try {
-        if ((void 0).pgPool) {
-          await (void 0).pgPool.query("DELETE FROM admin_sessions WHERE id = $1", [verified.jti]);
-        } else {
-          (void 0).db.prepare("DELETE FROM admin_sessions WHERE id = ?").run(verified.jti);
-        }
-      } catch {
-      }
-    }
-  }
-  clearJwtCookie(res);
-  res.redirect("/admin/login");
-});
 //# sourceMappingURL=index.js.map