@stage-labs/metro 0.1.0-beta.117 → 0.1.0-beta.118

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stage-labs/metro",
-  "version": "0.1.0-beta.117",
+  "version": "0.1.0-beta.118",
   "description": "The metro command line. Sign in once per machine, then hand your MCP connector list to Claude Code without the credentials touching disk, argv or shell history.",
   "license": "MIT",
   "repository": {

package/runtime/marketplace/plugin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "metro",
-  "version": "0.1.0-beta.117",
+  "version": "0.1.0-beta.118",
   "description": "Metro for Claude Code, installed by the metro daemon on this machine: every connector the agent holds as its own MCP server relayed through the daemon, the orchestrator-only guard on the main thread, the standing rules loaded at each session start, and a refresh skill for when the daemon could not keep the server list current. No vendor credential ever sits in a config file.",
   "author": {
     "name": "Bonustrack",

package/runtime/node_modules/@metro-labs/daemon/src/agents/bundle.ts

@@ -33,9 +33,17 @@ export interface RestoredAgent {
   connectors: number;
 }
 
+export type ImportMode = 'append' | 'overwrite';
+
 export interface BundleApiDeps {
   bundle: (subject: string, agentId: string) => Promise<AgentBundle>;
-  restore: (subject: string, bundle: AgentBundle) => Promise<RestoredAgent>;
+  restore: (subject: string, bundle: AgentBundle, mode: ImportMode) => Promise<RestoredAgent>;
+}
+
+export function parseMode(raw: unknown): ImportMode {
+  const mode = isRecord(raw) && typeof raw.mode === 'string' ? raw.mode : 'overwrite';
+  if (mode !== 'append' && mode !== 'overwrite') throw bad("mode is 'append' or 'overwrite'");
+  return mode;
 }
 
 const bad = (what: string): ApiError => new ApiError(`bundle: ${what}`, 400);
@@ -73,7 +81,10 @@ export function parseBundle(raw: unknown): AgentBundle {
 }
 
 async function answer(req: IncomingMessage, deps: BundleApiDeps, subject: string, path: string): Promise<unknown> {
-  if (path === RESTORE_PATH) return deps.restore(subject, parseBundle(await readJsonBody(req, BUNDLE_MAX)));
+  if (path === RESTORE_PATH) {
+    const body: unknown = await readJsonBody(req, BUNDLE_MAX);
+    return deps.restore(subject, parseBundle(body), parseMode(body));
+  }
   const id = parseId(path.slice(AGENTS.length + 1).split('/')[0] ?? '');
   if (id === null) throw new ApiError('no such agent', 404);
   return deps.bundle(subject, id);

package/runtime/node_modules/@metro-labs/daemon/src/agents/file-admin.ts

@@ -206,15 +206,18 @@ function importTarget(dir: string, agent: LoadedAgent & { key: string }): Import
   return { path: same?.path ?? fresh, previous: same?.file };
 }
 
+export type ImportMode = 'append' | 'overwrite';
+
 export async function localImportAgent(
   subject: string,
   agent: LoadedAgent,
   dir = agentsDir(),
+  mode: ImportMode = 'overwrite',
 ): Promise<{ id: string; name: string; key: string; stations: number }> {
   assertLocalOwner(subject, dir);
   assertImportable(agent);
   const { path, previous } = importTarget(dir, agent);
-  const file = fileFor(agent, localOwner(dir), path, previous);
+  const file = fileFor(agent, localOwner(dir), path, previous, mode);
   ensureSecureDir(join(path, '..'));
   save({ path, file });
   if (previous !== undefined && previous.key !== agent.key) unregisterAgentKey(agent.id);
@@ -227,11 +230,17 @@ export async function localImportAgent(
   });
 }
 
-function mergedStations(agent: LoadedAgent, previous: AgentFile | undefined): AgentFile['stations'] {
-  const fromMetro = agent.accounts.map((a) => ({ ...a, allowlist: a.allowlist ?? ['*'] }));
-  const kept = (previous?.stations ?? []).filter(
-    (s) => !fromMetro.some((m) => m.station === s.station && m.id === s.id),
-  );
+function mergedStations(
+  agent: LoadedAgent,
+  previous: AgentFile | undefined,
+  mode: ImportMode,
+): AgentFile['stations'] {
+  const before = previous?.stations ?? [];
+  const here = (station: string, id: string): boolean => before.some((s) => s.station === station && s.id === id);
+  const fromMetro = agent.accounts
+    .map((a) => ({ ...a, allowlist: a.allowlist ?? ['*'] }))
+    .filter((m) => mode === 'overwrite' || !here(m.station, m.id));
+  const kept = before.filter((s) => !fromMetro.some((m) => m.station === s.station && m.id === s.id));
   return [...fromMetro, ...kept];
 }
 
@@ -239,7 +248,8 @@ function fileFor(
   agent: LoadedAgent,
   owner: string | null,
   path: string,
-  previous?: AgentFile,
+  previous: AgentFile | undefined,
+  mode: ImportMode,
 ): AgentFile {
   try {
     return parseAgentFile(
@@ -249,7 +259,7 @@ function fileFor(
         name: previous?.name ?? agent.name,
         key: agent.key,
         owner,
-        stations: mergedStations(agent, previous),
+        stations: mergedStations(agent, previous, mode),
         connectors: previous?.connectors ?? [],
       }),
       path,

package/runtime/node_modules/@metro-labs/daemon/src/claude/api.ts

@@ -39,6 +39,7 @@ import {
   listMemory,
   readMemoryFile,
   readTranscript,
+  writeMemoryFile,
 } from './files.js';
 
 const PREFIX = '/api/claude';
@@ -94,12 +95,16 @@ const parts = (path: string): string[] => path.slice(PREFIX.length + 1).split('/
 const seenIn = (body: Record<string, unknown>): string | null | undefined =>
   'seenAt' in body ? (typeof body.seenAt === 'string' ? body.seenAt : null) : undefined;
 
-async function writeAnswer(req: IncomingMessage, path: string, dir: string): Promise<unknown> {
+const WRITE_HEADS = new Set(['settings', 'skills', 'memory']);
+
+async function writeAnswer(req: IncomingMessage, path: string, search: string, dir: string): Promise<unknown> {
   const [head = '', item = ''] = parts(path);
-  if ((head !== 'settings' && head !== 'skills') || item === '') throw new ApiError('method not allowed', 405);
+  if (!WRITE_HEADS.has(head) || item === '') throw new ApiError('method not allowed', 405);
   const body = await readJsonBody(req, BODY_MAX);
   if (!isRecord(body) || typeof body.text !== 'string') throw new ApiError('text is required', 400);
   if (head === 'skills') return writeClaudeSkill(decodeURIComponent(item), body.text, seenIn(body), dir);
+  if (head === 'memory')
+    return writeMemoryFile(projectOf(new URLSearchParams(search)), decodeURIComponent(item), body.text, dir);
   return writeClaudeSettings(item, body.text, seenIn(body), dir);
 }
 
@@ -217,7 +222,7 @@ function routed(req: IncomingMessage, path: string, search: string, deps: Claude
   if (head === LOGIN) return loginAnswer(req, item, deps);
   const single = item === '' ? SINGLETONS[head] : undefined;
   if (single !== undefined) return single(req, deps);
-  if (req.method === 'PUT') return writeAnswer(req, path, dir);
+  if (req.method === 'PUT') return writeAnswer(req, path, search, dir);
   if (req.method === 'POST') return created(req, path, dir);
   return answer(req.method ?? 'GET', path, new URLSearchParams(search), dir);
 }

package/runtime/node_modules/@metro-labs/daemon/src/claude/files.ts

@@ -2,11 +2,14 @@ import {
   closeSync,
   createReadStream,
   existsSync,
+  mkdirSync,
   openSync,
   readdirSync,
   readSync,
+  renameSync,
   rmSync,
   statSync,
+  writeFileSync,
 } from 'node:fs';
 import { homedir } from 'node:os';
 import { join } from 'node:path';
@@ -22,6 +25,8 @@ const TEXT_CAP = 20_000;
 const RESULT_CAP = 8_000;
 const INPUT_CAP = 4_000;
 const FILE_CAP = 1_000_000;
+const MEMORY_MAX = 256 * 1024;
+const MEMORY_MODE = 0o644;
 const NOISE = ['<task-notification>', '<system-reminder>', '<local-command', '<command-name>'];
 
 export function claudeDir(): string {
@@ -322,6 +327,21 @@ export function listMemory(project: string, dir = claudeDir()): MemoryListing {
   return { files, index: existsSync(index) ? readCapped(index) : null };
 }
 
+export function writeMemoryFile(project: string, name: string, text: string, dir = claudeDir()): MemoryFile {
+  if (text.trim() === '') throw new ApiError('a memory file cannot be empty', 400);
+  if (Buffer.byteLength(text, 'utf8') > MEMORY_MAX)
+    throw new ApiError(`a memory file is at most ${String(MEMORY_MAX)} bytes`, 400);
+  const folder = memoryDir(project, dir);
+  const file = safeName(name, MEMORY_RE, 'memory file name');
+  mkdirSync(folder, { recursive: true });
+  const path = join(folder, file);
+  const tmp = `${path}.metro-${String(process.pid)}`;
+  writeFileSync(tmp, text, { mode: MEMORY_MODE });
+  renameSync(tmp, path);
+  const stat = statSync(path);
+  return { name: file, bytes: stat.size, modifiedAt: stat.mtime.toISOString() };
+}
+
 export function readMemoryFile(project: string, name: string, dir = claudeDir()): string {
   const path = join(memoryDir(project, dir), safeName(name, MEMORY_RE, 'memory file name'));
   if (!existsSync(path)) throw new ApiError('no such memory file', 404);

package/runtime/node_modules/@metro-labs/daemon/src/connectors/store.ts

@@ -104,14 +104,22 @@ async function oauthCapable(url: URL, auth: ConnectorAuth): Promise<boolean> {
   return advertisesOAuth(url);
 }
 
-export function localImportConnectors(rows: LoadedConnector[], dir = agentsDir()): number {
+export function localImportConnectors(
+  rows: LoadedConnector[],
+  dir = agentsDir(),
+  mode: 'append' | 'overwrite' = 'overwrite',
+): number {
   const current = readLocalConnectors(dir);
-  for (const row of rows) {
+  const fresh =
+    mode === 'overwrite'
+      ? rows
+      : rows.filter((row) => !current.some((r) => r.id === row.id || r.name === row.name));
+  for (const row of fresh) {
     const other = current.find((r) => r.id !== row.id && r.name === row.name);
     if (other !== undefined)
       throw new ConnectorError(`a connector named '${row.name}' already exists on this daemon; rename it first`, 409);
   }
-  const imported: LocalConnectorRow[] = rows.map((row) => ({
+  const imported: LocalConnectorRow[] = fresh.map((row) => ({
     id: row.id,
     name: row.name,
     url: row.url,

package/runtime/node_modules/@metro-labs/daemon/src/routes/local-mode.ts

@@ -164,10 +164,10 @@ function bundleApi(deps: LocalModeDeps): BundleApiDeps {
       if (bundle.agent.key === '') throw new ApiError(`agent '${agent.name}' has no key to bundle`, 400);
       return bundle;
     },
-    restore: async (subject, bundle) => {
+    restore: async (subject, bundle, mode) => {
       assertLocalOwner(subject);
-      const made = await localImportAgent(subject, loadedAgentOf(bundle));
-      const connectors = localImportConnectors(bundle.connectors);
+      const made = await localImportAgent(subject, loadedAgentOf(bundle), undefined, mode);
+      const connectors = localImportConnectors(bundle.connectors, undefined, mode);
       for (const station of new Set(bundle.agent.stations.map((a) => a.station)))
         await deps.syncStations(station).catch((err: unknown) => {
           log.warn({ station, err: errMsg(err) }, 'restore: station reload failed, the change lands at the next boot');

package/runtime/runtime.json

@@ -1,3 +1,3 @@
 {
-  "version": "0.1.0-beta.117"
+  "version": "0.1.0-beta.118"
 }