@stage-labs/metro 0.1.0-beta.132 → 0.1.0-beta.133

package/dist/claude.js

@@ -1,7 +1,7 @@
 import { spawn, spawnSync } from 'node:child_process';
 import { markOnboardingDone, seedChannels } from './onboarding.js';
 import { writeMcpConfig } from './mcp-config.js';
-import { currentRoute, permissionMode, routeModelEnv } from './route.js';
+import { currentRoute, permissionMode, routeModelEnv, systemPrompt } from './route.js';
 import { settingsConflicts, settingsFiles } from './claude-settings.js';
 import { localAgents, pickLocalAgent } from './local.js';
 import { PROVIDER_FLAGS } from './provider-flags.js';
@@ -10,11 +10,12 @@ const CHANNEL_FLAGS = ['--dangerously-load-development-channels', 'server:metro'
 const PERMISSION_MODE_FLAG = { auto: 'auto', bypass: 'bypassPermissions' };
 const KEY_HEADER = 'x-metro-key';
 const PROBE_MS = 3_000;
-export const claudeArgs = (extra, mcpConfig, mode = 'auto') => [
+export const claudeArgs = (extra, mcpConfig, mode = 'auto', prompt = null) => [
     ...CHANNEL_FLAGS,
     '--permission-mode',
     PERMISSION_MODE_FLAG[mode],
     ...(mcpConfig === undefined ? [] : ['--mcp-config', mcpConfig]),
+    ...(prompt === null ? [] : ['--append-system-prompt', prompt]),
     ...extra,
 ];
 const set = (env, name) => (env[name] ?? '').trim() !== '';
@@ -157,6 +158,9 @@ export async function launchClaude(extra) {
     const port = localPort();
     const mcp = mcpConfigFor(await servedKey(decision), port);
     const mode = permissionMode();
+    const prompt = systemPrompt();
+    if (prompt !== null)
+        process.stderr.write('metro claude: the system prompt from the Harness page is appended to this session\n');
     const sandbox = (env) => {
         const out = bypassSandboxEnv(env, mode, process.getuid?.());
         if (out !== env)
@@ -166,9 +170,9 @@ export async function launchClaude(extra) {
     try {
         if ('skip' in decision) {
             process.stderr.write(`metro claude: ${decision.skip}\n`);
-            return await runClaude(claudeArgs(extra, mcp?.path, mode), sandbox(process.env));
+            return await runClaude(claudeArgs(extra, mcp?.path, mode, prompt), sandbox(process.env));
         }
-        return await runClaude(claudeArgs(extra, mcp?.path, mode), sandbox(gatewayLaunchEnv(decision.key, port)));
+        return await runClaude(claudeArgs(extra, mcp?.path, mode, prompt), sandbox(gatewayLaunchEnv(decision.key, port)));
     }
     finally {
         mcp?.cleanup();

package/dist/route.js

@@ -36,3 +36,15 @@ export function permissionMode(dir = agentsDir()) {
         return 'auto';
     }
 }
+export function systemPrompt(dir = agentsDir()) {
+    const path = join(dir, 'system-prompt.md');
+    if (!existsSync(path))
+        return null;
+    try {
+        const text = readFileSync(path, 'utf8').trim();
+        return text === '' ? null : text;
+    }
+    catch {
+        return null;
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stage-labs/metro",
-  "version": "0.1.0-beta.132",
+  "version": "0.1.0-beta.133",
   "description": "The metro command line. Sign in once per machine, then hand your MCP connector list to Claude Code without the credentials touching disk, argv or shell history.",
   "license": "MIT",
   "repository": {

package/runtime/marketplace/plugin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "metro",
-  "version": "0.1.0-beta.132",
+  "version": "0.1.0-beta.133",
   "description": "Metro for Claude Code, installed by the metro daemon on this machine: every connector the agent holds as its own MCP server relayed through the daemon, the orchestrator-only guard on the main thread, the standing rules loaded at each session start, and a refresh skill for when the daemon could not keep the server list current. No vendor credential ever sits in a config file.",
   "author": {
     "name": "Bonustrack",

package/runtime/node_modules/@metro-labs/daemon/src/claude/api.ts

@@ -21,7 +21,19 @@ import {
   startClaudeLogin,
   type LoginDeps,
 } from './login.js';
-import { claudeSetupStatus, ensureClaudeSetup, isPermissionMode, permissionMode, setPermissionMode, setPrivacy, type PermissionMode, type SetupDeps } from './setup.js';
+import {
+  claudeSetupStatus,
+  ensureClaudeSetup,
+  isPermissionMode,
+  permissionMode,
+  setPermissionMode,
+  setPrivacy,
+  setSystemPrompt,
+  systemPrompt,
+  SYSTEM_PROMPT_MAX,
+  type PermissionMode,
+  type SetupDeps,
+} from './setup.js';
 import {
   ensureSession,
   sessionRunning,
@@ -138,28 +150,64 @@ async function created(req: IncomingMessage, path: string, dir: string): Promise
 const LOGIN = 'login';
 const SESSION = 'session';
 const SETUP = 'setup';
+const SETUP_BODY_MAX = SYSTEM_PROMPT_MAX * 2;
 const VERSION = 'version';
 
 interface SetupChange {
   privacy?: boolean;
   permissionMode?: PermissionMode;
+  systemPrompt?: string;
+}
+
+function promptChange(raw: unknown): string | undefined {
+  if (raw === undefined) return undefined;
+  if (typeof raw !== 'string') throw new ApiError('systemPrompt must be text', 400);
+  if (Buffer.byteLength(raw) > SYSTEM_PROMPT_MAX) throw new ApiError(`systemPrompt must be under ${String(SYSTEM_PROMPT_MAX / 1024)} KiB`, 400);
+  return raw;
+}
+
+function privacyChange(raw: unknown): boolean | undefined {
+  if (raw === undefined) return undefined;
+  if (typeof raw !== 'boolean') throw new ApiError('privacy must be true or false', 400);
+  return raw;
+}
+
+function modeChange(raw: unknown): PermissionMode | undefined {
+  if (raw === undefined) return undefined;
+  if (!isPermissionMode(raw)) throw new ApiError('permissionMode must be auto or bypass', 400);
+  return raw;
 }
 
 function setupChange(body: unknown): SetupChange {
   if (!isRecord(body)) throw new ApiError('a body is required', 400);
-  if (body.privacy !== undefined && typeof body.privacy !== 'boolean') throw new ApiError('privacy must be true or false', 400);
-  if (body.permissionMode !== undefined && !isPermissionMode(body.permissionMode)) throw new ApiError('permissionMode must be auto or bypass', 400);
-  if (body.privacy === undefined && body.permissionMode === undefined) throw new ApiError('nothing to change', 400);
-  return { ...(typeof body.privacy === 'boolean' ? { privacy: body.privacy } : {}), ...(isPermissionMode(body.permissionMode) ? { permissionMode: body.permissionMode } : {}) };
+  const privacy = privacyChange(body.privacy);
+  const permissionMode = modeChange(body.permissionMode);
+  const systemPrompt = promptChange(body.systemPrompt);
+  if (privacy === undefined && permissionMode === undefined && systemPrompt === undefined) throw new ApiError('nothing to change', 400);
+  return {
+    ...(privacy === undefined ? {} : { privacy }),
+    ...(permissionMode === undefined ? {} : { permissionMode }),
+    ...(systemPrompt === undefined ? {} : { systemPrompt }),
+  };
+}
+
+function restartsSession(change: SetupChange, agents: string | undefined): boolean {
+  let restart = false;
+  if (change.permissionMode !== undefined && change.permissionMode !== permissionMode(agents)) {
+    setPermissionMode(change.permissionMode, agents);
+    restart = true;
+  }
+  if (change.systemPrompt !== undefined && change.systemPrompt.trim() !== systemPrompt(agents)) {
+    setSystemPrompt(change.systemPrompt, agents);
+    restart = true;
+  }
+  return restart;
 }
 
 function applySetupChange(change: SetupChange, deps: ClaudeApiDeps): void {
   const setup = deps.setup ?? {};
   if (change.privacy !== undefined) setPrivacy(change.privacy, setup.agents);
-  if (change.permissionMode !== undefined && change.permissionMode !== permissionMode(setup.agents)) {
-    setPermissionMode(change.permissionMode, setup.agents);
-    if (sessionRunning(deps.session?.tmux ?? 'tmux')) stopSession(deps.session ?? {});
-  }
+  if (restartsSession(change, setup.agents) && sessionRunning(deps.session?.tmux ?? 'tmux')) stopSession(deps.session ?? {});
   ensureClaudeSetup(setup);
 }
 
@@ -168,7 +216,7 @@ async function setupAnswer(req: IncomingMessage, deps: ClaudeApiDeps): Promise<u
   const method = req.method ?? 'GET';
   if (method === 'GET') return claudeSetupStatus(setup);
   if (method !== 'POST') throw new ApiError('method not allowed', 405);
-  applySetupChange(setupChange(await readJsonBody(req)), deps);
+  applySetupChange(setupChange(await readJsonBody(req, SETUP_BODY_MAX)), deps);
   return claudeSetupStatus(setup);
 }
 

package/runtime/node_modules/@metro-labs/daemon/src/claude/setup.ts

@@ -1,4 +1,4 @@
-import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
+import { existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from 'node:fs';
 import { dirname, join } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { errMsg, log } from '@metro-labs/core/log';
@@ -19,6 +19,8 @@ export const RETENTION_DAYS = 7;
 export const SKILL_NAME = 'metro-orchestrator';
 const STATE_FILE = 'claude-setup.json';
 const GUIDANCE = 'orchestrator.md';
+export const SYSTEM_PROMPT_FILE = 'system-prompt.md';
+export const SYSTEM_PROMPT_MAX = 64 * 1024;
 
 export const WORKER_AGENT = `---
 name: worker
@@ -56,6 +58,7 @@ export interface SetupReport {
 export interface SetupStatus {
   privacy: boolean;
   permissionMode: PermissionMode;
+  systemPrompt: string;
   guard: 'plugin';
   worker: boolean;
   skill: boolean;
@@ -95,6 +98,26 @@ export function setPermissionMode(mode: PermissionMode, agents = agentsDir()): v
   writeState(agents, { permissionMode: mode });
 }
 
+const promptPath = (agents: string): string => join(agents, SYSTEM_PROMPT_FILE);
+
+export function systemPrompt(agents = agentsDir()): string {
+  const path = promptPath(agents);
+  if (!existsSync(path)) return '';
+  return readFileSync(path, 'utf8').trim();
+}
+
+export function setSystemPrompt(text: string, agents = agentsDir()): void {
+  const trimmed = text.trim();
+  if (trimmed === '') {
+    rmSync(promptPath(agents), { force: true });
+    return;
+  }
+  mkdirSync(agents, { recursive: true });
+  const tmp = `${promptPath(agents)}.${String(process.pid)}.tmp`;
+  writeFileSync(tmp, `${trimmed}\n`, { mode: 0o600 });
+  renameSync(tmp, promptPath(agents));
+}
+
 export function guidancePath(env: NodeJS.ProcessEnv = process.env): string {
   const staged = stagedMarketplaceDir(env);
   if (staged !== null) {
@@ -178,6 +201,7 @@ export function claudeSetupStatus(deps: SetupDeps = {}): SetupStatus {
   return {
     privacy: privacyEnabled(deps.agents ?? agentsDir()),
     permissionMode: permissionMode(deps.agents ?? agentsDir()),
+    systemPrompt: systemPrompt(deps.agents ?? agentsDir()),
     guard: 'plugin',
     worker: existsSync(workerPath(dir)),
     skill: existsSync(skillPath(dir)),

package/runtime/runtime.json

@@ -1,3 +1,3 @@
 {
-  "version": "0.1.0-beta.132"
+  "version": "0.1.0-beta.133"
 }