@stage-labs/metro 0.1.0-beta.116 → 0.1.0-beta.118

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stage-labs/metro",
-  "version": "0.1.0-beta.116",
+  "version": "0.1.0-beta.118",
   "description": "The metro command line. Sign in once per machine, then hand your MCP connector list to Claude Code without the credentials touching disk, argv or shell history.",
   "license": "MIT",
   "repository": {

package/runtime/marketplace/plugin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "metro",
-  "version": "0.1.0-beta.116",
+  "version": "0.1.0-beta.118",
   "description": "Metro for Claude Code, installed by the metro daemon on this machine: every connector the agent holds as its own MCP server relayed through the daemon, the orchestrator-only guard on the main thread, the standing rules loaded at each session start, and a refresh skill for when the daemon could not keep the server list current. No vendor credential ever sits in a config file.",
   "author": {
     "name": "Bonustrack",

package/runtime/marketplace/plugin/bin/guard.mjs

@@ -20,6 +20,8 @@ const ORCHESTRATION = new Set([
   'TaskUpdate',
 ]);
 const IMAGE = /\.(png|jpe?g|gif|webp|bmp)$/i;
+const MCP = /^mcp__/;
+const METRO_MCP = /^mcp__metro__/;
 
 function deny(reason) {
   process.stdout.write(
@@ -35,7 +37,10 @@ function verdict(payload) {
   if (typeof payload.agent_id === 'string' && payload.agent_id !== '') return null;
   if (tool === 'Agent' && input.run_in_background === false)
     return 'A foreground subagent blinds the main thread: it cannot see or acknowledge inbound metro messages until the agent finishes. Re-issue the identical Agent call with run_in_background: true, then wait for the task notification.';
-  if (ORCHESTRATION.has(tool) || tool.startsWith('mcp__')) return null;
+  if (ORCHESTRATION.has(tool)) return null;
+  if (METRO_MCP.test(tool)) return null;
+  if (MCP.test(tool))
+    return `A connector call is work, not orchestration: ${tool} reads somebody's files, mail or records, and its answer can be long enough to crowd out the chat you are here to follow. Only metro's own tools run on this thread. Delegate it to a subagent with the Agent tool (run_in_background: true; the worker reaches every connector) and relay what it finds.`;
   if (tool === 'Read' && typeof input.file_path === 'string' && IMAGE.test(input.file_path)) return null;
   return `The main thread is orchestrator-only, so ${tool === '' ? 'this tool' : tool} is not available here. Delegate the work to a subagent with the Agent tool (run_in_background: true; the worker agent has full tool access) or to a Workflow, and report the result over metro.`;
 }

package/runtime/marketplace/plugin/orchestrator.md

@@ -7,7 +7,7 @@ You are the main thread of a Claude Code session that is connected to chat throu
 
 **Inbound.** A message arrives as a `<channel source="metro" …>` block. Read `addressed` first: `direct`, `mention` or `reply` means it is for you; without it the message merely happened in a room you watch, so treat it as context and stay silent unless the person plainly wants you. For a message that is for you, the first tool call is `react` on it (👀, then 👍 or ✅ once done) so the person knows you saw it, and any reply goes on the same `line`, passed verbatim.
 
-**Delegate everything that is work.** Reading files, running commands, searching, fetching pages, editing: hand it to a subagent with the `Agent` tool, `subagent_type: "worker"`, always `run_in_background: true`, then keep answering chat while it runs and relay the result when the task notification arrives. A foreground subagent blinds you to chat and the guard refuses it. You may read image files yourself, so a screenshot someone sends is yours to look at.
+**Delegate everything that is work.** Reading files, running commands, searching, fetching pages, editing, and every connector tool: hand it to a subagent with the `Agent` tool, `subagent_type: "worker"`, always `run_in_background: true`, then keep answering chat while it runs and relay the result when the task notification arrives. A foreground subagent blinds you to chat and the guard refuses it. You may read image files yourself, so a screenshot someone sends is yours to look at.
 
 **Never wait on the terminal.** `AskUserQuestion`, plan mode and anything that blocks for a person at the keyboard are denied everywhere, main thread and subagents alike. When something is ambiguous, do what does not depend on it, choose the most reasonable reading, say so in your reply, and if a real decision is needed ask over chat with `send` and carry on. Tool-approval prompts reach the chat too; the person answers `yes <id>` or `no <id>` there.
 

package/runtime/node_modules/@metro-labs/daemon/src/agents/bundle.ts

@@ -33,9 +33,17 @@ export interface RestoredAgent {
   connectors: number;
 }
 
+export type ImportMode = 'append' | 'overwrite';
+
 export interface BundleApiDeps {
   bundle: (subject: string, agentId: string) => Promise<AgentBundle>;
-  restore: (subject: string, bundle: AgentBundle) => Promise<RestoredAgent>;
+  restore: (subject: string, bundle: AgentBundle, mode: ImportMode) => Promise<RestoredAgent>;
+}
+
+export function parseMode(raw: unknown): ImportMode {
+  const mode = isRecord(raw) && typeof raw.mode === 'string' ? raw.mode : 'overwrite';
+  if (mode !== 'append' && mode !== 'overwrite') throw bad("mode is 'append' or 'overwrite'");
+  return mode;
 }
 
 const bad = (what: string): ApiError => new ApiError(`bundle: ${what}`, 400);
@@ -73,7 +81,10 @@ export function parseBundle(raw: unknown): AgentBundle {
 }
 
 async function answer(req: IncomingMessage, deps: BundleApiDeps, subject: string, path: string): Promise<unknown> {
-  if (path === RESTORE_PATH) return deps.restore(subject, parseBundle(await readJsonBody(req, BUNDLE_MAX)));
+  if (path === RESTORE_PATH) {
+    const body: unknown = await readJsonBody(req, BUNDLE_MAX);
+    return deps.restore(subject, parseBundle(body), parseMode(body));
+  }
   const id = parseId(path.slice(AGENTS.length + 1).split('/')[0] ?? '');
   if (id === null) throw new ApiError('no such agent', 404);
   return deps.bundle(subject, id);

package/runtime/node_modules/@metro-labs/daemon/src/agents/file-admin.ts

@@ -206,15 +206,18 @@ function importTarget(dir: string, agent: LoadedAgent & { key: string }): Import
   return { path: same?.path ?? fresh, previous: same?.file };
 }
 
+export type ImportMode = 'append' | 'overwrite';
+
 export async function localImportAgent(
   subject: string,
   agent: LoadedAgent,
   dir = agentsDir(),
+  mode: ImportMode = 'overwrite',
 ): Promise<{ id: string; name: string; key: string; stations: number }> {
   assertLocalOwner(subject, dir);
   assertImportable(agent);
   const { path, previous } = importTarget(dir, agent);
-  const file = fileFor(agent, localOwner(dir), path, previous);
+  const file = fileFor(agent, localOwner(dir), path, previous, mode);
   ensureSecureDir(join(path, '..'));
   save({ path, file });
   if (previous !== undefined && previous.key !== agent.key) unregisterAgentKey(agent.id);
@@ -227,11 +230,17 @@ export async function localImportAgent(
   });
 }
 
-function mergedStations(agent: LoadedAgent, previous: AgentFile | undefined): AgentFile['stations'] {
-  const fromMetro = agent.accounts.map((a) => ({ ...a, allowlist: a.allowlist ?? ['*'] }));
-  const kept = (previous?.stations ?? []).filter(
-    (s) => !fromMetro.some((m) => m.station === s.station && m.id === s.id),
-  );
+function mergedStations(
+  agent: LoadedAgent,
+  previous: AgentFile | undefined,
+  mode: ImportMode,
+): AgentFile['stations'] {
+  const before = previous?.stations ?? [];
+  const here = (station: string, id: string): boolean => before.some((s) => s.station === station && s.id === id);
+  const fromMetro = agent.accounts
+    .map((a) => ({ ...a, allowlist: a.allowlist ?? ['*'] }))
+    .filter((m) => mode === 'overwrite' || !here(m.station, m.id));
+  const kept = before.filter((s) => !fromMetro.some((m) => m.station === s.station && m.id === s.id));
   return [...fromMetro, ...kept];
 }
 
@@ -239,7 +248,8 @@ function fileFor(
   agent: LoadedAgent,
   owner: string | null,
   path: string,
-  previous?: AgentFile,
+  previous: AgentFile | undefined,
+  mode: ImportMode,
 ): AgentFile {
   try {
     return parseAgentFile(
@@ -249,7 +259,7 @@ function fileFor(
         name: previous?.name ?? agent.name,
         key: agent.key,
         owner,
-        stations: mergedStations(agent, previous),
+        stations: mergedStations(agent, previous, mode),
         connectors: previous?.connectors ?? [],
       }),
       path,

package/runtime/node_modules/@metro-labs/daemon/src/claude/api.ts

@@ -39,6 +39,7 @@ import {
   listMemory,
   readMemoryFile,
   readTranscript,
+  writeMemoryFile,
 } from './files.js';
 
 const PREFIX = '/api/claude';
@@ -94,12 +95,16 @@ const parts = (path: string): string[] => path.slice(PREFIX.length + 1).split('/
 const seenIn = (body: Record<string, unknown>): string | null | undefined =>
   'seenAt' in body ? (typeof body.seenAt === 'string' ? body.seenAt : null) : undefined;
 
-async function writeAnswer(req: IncomingMessage, path: string, dir: string): Promise<unknown> {
+const WRITE_HEADS = new Set(['settings', 'skills', 'memory']);
+
+async function writeAnswer(req: IncomingMessage, path: string, search: string, dir: string): Promise<unknown> {
   const [head = '', item = ''] = parts(path);
-  if ((head !== 'settings' && head !== 'skills') || item === '') throw new ApiError('method not allowed', 405);
+  if (!WRITE_HEADS.has(head) || item === '') throw new ApiError('method not allowed', 405);
   const body = await readJsonBody(req, BODY_MAX);
   if (!isRecord(body) || typeof body.text !== 'string') throw new ApiError('text is required', 400);
   if (head === 'skills') return writeClaudeSkill(decodeURIComponent(item), body.text, seenIn(body), dir);
+  if (head === 'memory')
+    return writeMemoryFile(projectOf(new URLSearchParams(search)), decodeURIComponent(item), body.text, dir);
   return writeClaudeSettings(item, body.text, seenIn(body), dir);
 }
 
@@ -217,7 +222,7 @@ function routed(req: IncomingMessage, path: string, search: string, deps: Claude
   if (head === LOGIN) return loginAnswer(req, item, deps);
   const single = item === '' ? SINGLETONS[head] : undefined;
   if (single !== undefined) return single(req, deps);
-  if (req.method === 'PUT') return writeAnswer(req, path, dir);
+  if (req.method === 'PUT') return writeAnswer(req, path, search, dir);
   if (req.method === 'POST') return created(req, path, dir);
   return answer(req.method ?? 'GET', path, new URLSearchParams(search), dir);
 }

package/runtime/node_modules/@metro-labs/daemon/src/claude/files.ts

@@ -2,11 +2,14 @@ import {
   closeSync,
   createReadStream,
   existsSync,
+  mkdirSync,
   openSync,
   readdirSync,
   readSync,
+  renameSync,
   rmSync,
   statSync,
+  writeFileSync,
 } from 'node:fs';
 import { homedir } from 'node:os';
 import { join } from 'node:path';
@@ -22,6 +25,8 @@ const TEXT_CAP = 20_000;
 const RESULT_CAP = 8_000;
 const INPUT_CAP = 4_000;
 const FILE_CAP = 1_000_000;
+const MEMORY_MAX = 256 * 1024;
+const MEMORY_MODE = 0o644;
 const NOISE = ['<task-notification>', '<system-reminder>', '<local-command', '<command-name>'];
 
 export function claudeDir(): string {
@@ -322,6 +327,21 @@ export function listMemory(project: string, dir = claudeDir()): MemoryListing {
   return { files, index: existsSync(index) ? readCapped(index) : null };
 }
 
+export function writeMemoryFile(project: string, name: string, text: string, dir = claudeDir()): MemoryFile {
+  if (text.trim() === '') throw new ApiError('a memory file cannot be empty', 400);
+  if (Buffer.byteLength(text, 'utf8') > MEMORY_MAX)
+    throw new ApiError(`a memory file is at most ${String(MEMORY_MAX)} bytes`, 400);
+  const folder = memoryDir(project, dir);
+  const file = safeName(name, MEMORY_RE, 'memory file name');
+  mkdirSync(folder, { recursive: true });
+  const path = join(folder, file);
+  const tmp = `${path}.metro-${String(process.pid)}`;
+  writeFileSync(tmp, text, { mode: MEMORY_MODE });
+  renameSync(tmp, path);
+  const stat = statSync(path);
+  return { name: file, bytes: stat.size, modifiedAt: stat.mtime.toISOString() };
+}
+
 export function readMemoryFile(project: string, name: string, dir = claudeDir()): string {
   const path = join(memoryDir(project, dir), safeName(name, MEMORY_RE, 'memory file name'));
   if (!existsSync(path)) throw new ApiError('no such memory file', 404);

package/runtime/node_modules/@metro-labs/daemon/src/connectors/store.ts

@@ -104,14 +104,22 @@ async function oauthCapable(url: URL, auth: ConnectorAuth): Promise<boolean> {
   return advertisesOAuth(url);
 }
 
-export function localImportConnectors(rows: LoadedConnector[], dir = agentsDir()): number {
+export function localImportConnectors(
+  rows: LoadedConnector[],
+  dir = agentsDir(),
+  mode: 'append' | 'overwrite' = 'overwrite',
+): number {
   const current = readLocalConnectors(dir);
-  for (const row of rows) {
+  const fresh =
+    mode === 'overwrite'
+      ? rows
+      : rows.filter((row) => !current.some((r) => r.id === row.id || r.name === row.name));
+  for (const row of fresh) {
     const other = current.find((r) => r.id !== row.id && r.name === row.name);
     if (other !== undefined)
       throw new ConnectorError(`a connector named '${row.name}' already exists on this daemon; rename it first`, 409);
   }
-  const imported: LocalConnectorRow[] = rows.map((row) => ({
+  const imported: LocalConnectorRow[] = fresh.map((row) => ({
     id: row.id,
     name: row.name,
     url: row.url,

package/runtime/node_modules/@metro-labs/daemon/src/gateway/openrouter.ts

@@ -9,6 +9,7 @@ export interface OpenRouterModel {
   name: string;
   prompt: number | null;
   completion: number | null;
+  created: number | null;
 }
 
 const str = (value: unknown): string => (typeof value === 'string' ? value : '');
@@ -18,12 +19,27 @@ function price(raw: unknown): number | null {
   return Number.isFinite(value) && value >= 0 ? value : null;
 }
 
+function released(raw: unknown): number | null {
+  return typeof raw === 'number' && Number.isFinite(raw) && raw > 0 ? raw : null;
+}
+
 function modelOf(entry: unknown): OpenRouterModel | null {
   if (!isRecord(entry)) return null;
   const id = str(entry.id);
   if (id === '') return null;
   const pricing = isRecord(entry.pricing) ? entry.pricing : {};
-  return { id, name: str(entry.name) || id, prompt: price(pricing.prompt), completion: price(pricing.completion) };
+  return {
+    id,
+    name: str(entry.name) || id,
+    prompt: price(pricing.prompt),
+    completion: price(pricing.completion),
+    created: released(entry.created),
+  };
+}
+
+export function newestFirst(a: OpenRouterModel, b: OpenRouterModel): number {
+  const when = (b.created ?? 0) - (a.created ?? 0);
+  return when !== 0 ? when : a.id.localeCompare(b.id);
 }
 
 export async function openrouterModels(base = OPENROUTER_BASE, fetchImpl: typeof fetch = fetch): Promise<OpenRouterModel[]> {
@@ -35,8 +51,8 @@ export async function openrouterModels(base = OPENROUTER_BASE, fetchImpl: typeof
   return data
     .map(modelOf)
     .filter((model): model is OpenRouterModel => model !== null)
-    .slice(0, MODELS_MAX)
-    .sort((a, b) => a.id.localeCompare(b.id));
+    .sort(newestFirst)
+    .slice(0, MODELS_MAX);
 }
 
 export async function openrouterZdrModels(base = OPENROUTER_BASE, fetchImpl: typeof fetch = fetch): Promise<string[]> {

package/runtime/node_modules/@metro-labs/daemon/src/routes/local-mode.ts

@@ -164,10 +164,10 @@ function bundleApi(deps: LocalModeDeps): BundleApiDeps {
       if (bundle.agent.key === '') throw new ApiError(`agent '${agent.name}' has no key to bundle`, 400);
       return bundle;
     },
-    restore: async (subject, bundle) => {
+    restore: async (subject, bundle, mode) => {
       assertLocalOwner(subject);
-      const made = await localImportAgent(subject, loadedAgentOf(bundle));
-      const connectors = localImportConnectors(bundle.connectors);
+      const made = await localImportAgent(subject, loadedAgentOf(bundle), undefined, mode);
+      const connectors = localImportConnectors(bundle.connectors, undefined, mode);
       for (const station of new Set(bundle.agent.stations.map((a) => a.station)))
         await deps.syncStations(station).catch((err: unknown) => {
           log.warn({ station, err: errMsg(err) }, 'restore: station reload failed, the change lands at the next boot');

package/runtime/runtime.json

@@ -1,3 +1,3 @@
 {
-  "version": "0.1.0-beta.116"
+  "version": "0.1.0-beta.118"
 }