@stage-labs/metro 0.1.0-beta.152 → 0.1.0-beta.153

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stage-labs/metro",
-  "version": "0.1.0-beta.152",
+  "version": "0.1.0-beta.153",
   "description": "The metro command line. Sign in once per machine, then hand your MCP connector list to Claude Code without the credentials touching disk, argv or shell history.",
   "license": "MIT",
   "repository": {

package/runtime/marketplace/plugin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "metro",
-  "version": "0.1.0-beta.152",
+  "version": "0.1.0-beta.153",
   "description": "Metro for Claude Code, installed by the metro daemon on this machine: every connector the agent holds as its own MCP server relayed through the daemon, the orchestrator-only guard on the main thread, and the standing rules loaded at each session start. No vendor credential ever sits in a config file.",
   "author": {
     "name": "Bonustrack",

package/runtime/node_modules/@metro-labs/core/package.json

@@ -23,7 +23,8 @@
     "./stations/station-runtime": "./src/stations/station-runtime.ts",
     "./stations/account-store": "./src/stations/account-store.ts",
     "./stations/attachments": "./src/stations/attachments.ts",
-    "./stations/messaging-normalize": "./src/stations/messaging-normalize.ts"
+    "./stations/messaging-normalize": "./src/stations/messaging-normalize.ts",
+    "./stations/profile": "./src/stations/profile.ts"
   },
   "scripts": {
     "build": "tsc",

package/runtime/node_modules/@metro-labs/core/src/stations/profile.ts

@@ -0,0 +1,58 @@
+import { TrainError } from '../train-error.js';
+
+export const PROFILE_FIELDS = ['name', 'bio', 'avatar'] as const;
+export type ProfileField = (typeof PROFILE_FIELDS)[number];
+
+export const NAME_MAX = 64;
+export const BIO_MAX = 512;
+
+export interface ProfileAvatar {
+  path: string;
+  mime: string;
+  name: string;
+}
+
+export interface ProfileChange {
+  name?: string;
+  bio?: string;
+  avatar?: ProfileAvatar;
+}
+
+export interface ProfileApplied {
+  account: string;
+  applied: ProfileField[];
+}
+
+const text = (value: unknown, field: string, max: number): string | undefined => {
+  if (value === undefined) return undefined;
+  if (typeof value !== 'string') throw new TrainError('bad_request', `${field} must be a string`);
+  const trimmed = value.trim();
+  if (trimmed === '') throw new TrainError('bad_request', `${field} cannot be empty`);
+  if (trimmed.length > max) throw new TrainError('bad_request', `${field} is over ${String(max)} characters`);
+  return trimmed;
+};
+
+function avatarOf(value: unknown): ProfileAvatar | undefined {
+  if (value === undefined) return undefined;
+  const raw = (value ?? {}) as Record<string, unknown>;
+  if (typeof raw.path !== 'string' || raw.path === '') throw new TrainError('bad_request', 'avatar needs a local file');
+  return { path: raw.path, mime: typeof raw.mime === 'string' ? raw.mime : 'application/octet-stream', name: typeof raw.name === 'string' ? raw.name : 'avatar' };
+}
+
+export function parseProfileChange(args: Record<string, unknown>): ProfileChange {
+  const change: ProfileChange = {};
+  const name = text(args.name, 'name', NAME_MAX);
+  const bio = text(args.bio, 'bio', BIO_MAX);
+  const avatar = avatarOf(args.avatar);
+  if (name !== undefined) change.name = name;
+  if (bio !== undefined) change.bio = bio;
+  if (avatar !== undefined) change.avatar = avatar;
+  if (Object.keys(change).length === 0) throw new TrainError('bad_request', 'set_profile needs at least one of name, bio, avatar');
+  return change;
+}
+
+export const fieldsOf = (change: ProfileChange): ProfileField[] => PROFILE_FIELDS.filter((f) => change[f] !== undefined);
+
+export const assertImage = (avatar: ProfileAvatar): void => {
+  if (!avatar.mime.startsWith('image/')) throw new TrainError('bad_request', `avatar must be an image, not ${avatar.mime}`);
+};

package/runtime/node_modules/@metro-labs/core/src/stations/types.ts

@@ -1,3 +1,5 @@
+import type { ProfileField } from './profile.js';
+
 export type Verb =
   | 'send'
   | 'reply'
@@ -98,6 +100,7 @@ export interface Station {
   messageVerbs: ReadonlySet<Verb>;
   groupOps?: ReadonlySet<GroupOp>;
   resolvesSenders?: boolean;
+  profileFields?: ReadonlySet<ProfileField>;
   attachmentMode: AttachmentMode;
   sendAttachments?(
     line: string,

package/runtime/node_modules/@metro-labs/daemon/src/mcp/profile-tool.ts

@@ -0,0 +1,92 @@
+import type { CanonicalAttachment, Station, ToolResult } from '@metro-labs/core/stations/types';
+import { PROFILE_FIELDS, type ProfileField } from '@metro-labs/core/stations/profile';
+import { str } from '@metro-labs/core/str';
+import { STATIONS, stationByName } from '../stations/registry.js';
+import { cleanupAttachments, resolveAttachments, type ResolvedAttachment } from '../stations/attach-resolve.js';
+import { errResult, makeCtx, okJson, toErr } from './ctx.js';
+import { allowedAgents, currentIdentity } from './request-identity.js';
+
+const SOURCE = { type: 'string' };
+
+export const SET_PROFILE_TOOL = {
+  name: 'set_profile',
+  description:
+    'Change how one of your accounts presents itself on its network: the display name, the bio ' +
+    '(about line) and the avatar. Args: station (required), account? (which account of that station; ' +
+    'needed only when you have several), name?, bio?, avatar? (an image given like an attachment: ' +
+    'exactly one of upload, url, path, data, plus mime and name). At least one of name, bio, avatar. ' +
+    'Each station takes what its network allows (`list_accounts` reports the fields under ' +
+    '`profiles`); a field the station cannot set is refused by name, never dropped. Discord changes ' +
+    'the bot username and app description (Discord allows two username changes an hour); Telegram ' +
+    'bots set their name, description and photo; a Telegram user account sets its first name, bio ' +
+    '(70 chars) and photo; WhatsApp sets the profile name, about and picture. Visible to everyone ' +
+    'who talks to the account, so do it when asked, not on your own. Returns {account, applied}.',
+  inputSchema: {
+    type: 'object',
+    properties: {
+      station: { type: 'string', description: 'discord-bot | telegram-bot | telegram | whatsapp' },
+      account: { type: 'string', description: 'The account id on that station, from list_accounts.' },
+      name: { type: 'string', description: 'The display name.' },
+      bio: { type: 'string', description: 'The bio or about line.' },
+      avatar: {
+        type: 'object',
+        description: 'The new picture, as an attachment source.',
+        properties: { upload: SOURCE, url: SOURCE, path: SOURCE, data: SOURCE, mime: SOURCE, name: SOURCE },
+      },
+    },
+    required: ['station'],
+  },
+};
+
+export const profileCapabilities = (): Record<string, ProfileField[]> => {
+  const out: Record<string, ProfileField[]> = {};
+  for (const s of STATIONS) if (s.profileFields !== undefined) out[s.name] = [...s.profileFields];
+  return out;
+};
+
+const asked = (a: Record<string, unknown>): ProfileField[] => PROFILE_FIELDS.filter((f) => a[f] !== undefined);
+
+type Target = { station: Station; fields: ProfileField[] } | { refused: string };
+
+function targetOf(a: Record<string, unknown>): Target {
+  const name = str(a.station);
+  if (!name) return { refused: 'set_profile requires `station`' };
+  const station = stationByName(name);
+  if (!station) return { refused: `no station named ${name}` };
+  const fields = station.profileFields;
+  if (fields === undefined) return { refused: `${name} accounts have no profile metro can set` };
+  const wanted = asked(a);
+  if (wanted.length === 0) return { refused: 'set_profile needs at least one of name, bio, avatar' };
+  const refused = wanted.filter((f) => !fields.has(f));
+  if (refused.length > 0) return { refused: `${name} cannot set ${refused.join(', ')}; it takes ${[...fields].join(', ')}` };
+  return { station, fields: wanted };
+}
+
+function trainArgs(a: Record<string, unknown>, picture: ResolvedAttachment | undefined): Record<string, unknown> {
+  const args: Record<string, unknown> = {};
+  if (typeof a.account === 'string') args.account = a.account;
+  if (typeof a.name === 'string') args.name = a.name;
+  if (typeof a.bio === 'string') args.bio = a.bio;
+  if (picture !== undefined) args.avatar = { path: picture.path, mime: picture.mime, name: picture.name };
+  return args;
+}
+
+export async function dispatchSetProfile(a: Record<string, unknown>): Promise<ToolResult> {
+  const target = targetOf(a);
+  if ('refused' in target) return errResult(target.refused);
+  const avatar = a.avatar === undefined ? [] : [a.avatar as CanonicalAttachment];
+  let resolved: ResolvedAttachment[];
+  try {
+    resolved = await resolveAttachments(avatar, { allowed: allowedAgents(currentIdentity()) });
+  } catch (e) {
+    return toErr('set_profile', e);
+  }
+  try {
+    const { result } = await makeCtx(target.station.name).call('set_profile', trainArgs(a, resolved[0]));
+    return okJson(result);
+  } catch (e) {
+    return toErr('set_profile', e);
+  } finally {
+    await cleanupAttachments(resolved);
+  }
+}

package/runtime/node_modules/@metro-labs/daemon/src/mcp/tool-dispatch.ts

@@ -21,6 +21,7 @@ import {
   dispatchRemoveMembers,
 } from './group-tools.js';
 import { dispatchCreateUpload } from './upload-tool.js';
+import { dispatchSetProfile, profileCapabilities, SET_PROFILE_TOOL } from './profile-tool.js';
 import { callTargetDenied, lineTargetDenied } from '../agents/scope.js';
 import { SOURCE_KEYS } from '../stations/attach-resolve.js';
 import { decodedLengthOf } from '../stations/attach-inline.js';
@@ -49,6 +50,7 @@ const CORE_DISPATCH: Record<
   remove_members: dispatchRemoveMembers,
   export_invite: dispatchInviteLink,
   create_upload: dispatchCreateUpload,
+  set_profile: dispatchSetProfile,
 };
 
 const toolList = (): { tools: unknown[] } => ({
@@ -62,6 +64,7 @@ const toolList = (): { tools: unknown[] } => ({
       })),
     ),
     LIST_ACCOUNTS_TOOL,
+    SET_PROFILE_TOOL,
   ],
 });
 
@@ -82,6 +85,7 @@ async function handleListAccounts(
     return okJson({
       accounts: await gatherAccounts(allowedAgents(identity)),
       capabilities: accountStationCapabilities(),
+      profiles: profileCapabilities(),
     });
   } catch (e) {
     return errResult(`metro list_accounts failed: ${String(e)}`);
@@ -92,7 +96,7 @@ function stationForTool(
   name: string,
   args: Record<string, unknown>,
 ): string | undefined {
-  if (name === 'create_group') return str(args.station) || undefined;
+  if (name === 'create_group' || name === 'set_profile') return str(args.station) || undefined;
   return STATION_TOOLS.get(name)?.station.name;
 }
 

package/runtime/node_modules/@metro-labs/discord-bot/src/actions.ts

@@ -27,6 +27,7 @@ import {
 } from '@metro-labs/core/stations/station-runtime';
 import { joinVoice, leaveVoice, voiceDebug, voiceTranscribe } from './voice.js';
 import { speak } from './voice-speak.js';
+import { setProfile } from './profile.js';
 import { discordMembers } from './members.js';
 import {
   groupAddHandler,
@@ -375,6 +376,7 @@ const HANDLERS: Record<string, StationHandler> = {
   channel,
   listMembers,
   set_presence: presence,
+  set_profile: setProfile,
   joinVoice,
   leaveVoice,
   speak,

package/runtime/node_modules/@metro-labs/discord-bot/src/profile.ts

@@ -0,0 +1,48 @@
+import { readFile } from 'node:fs/promises';
+import type { Client } from 'discord.js';
+import { TrainError } from '@metro-labs/core/train-error';
+import {
+  assertImage,
+  fieldsOf,
+  parseProfileChange,
+  type ProfileApplied,
+  type ProfileChange,
+} from '@metro-labs/core/stations/profile';
+import { accountFor, accounts } from './accounts.js';
+import { respond } from './wire.js';
+
+export async function applyProfile(
+  client: Client,
+  change: ProfileChange,
+): Promise<void> {
+  const user = client.user;
+  if (!user) throw new TrainError('discord_not_ready', 'the gateway is not ready yet');
+  if (change.avatar !== undefined) assertImage(change.avatar);
+  const avatar = change.avatar === undefined ? undefined : await readFile(change.avatar.path);
+  if (change.name !== undefined || avatar !== undefined)
+    await user.edit({
+      ...(change.name === undefined ? {} : { username: change.name }),
+      ...(avatar === undefined ? {} : { avatar }),
+    });
+  if (change.bio !== undefined) {
+    const app = client.application;
+    if (!app) throw new TrainError('discord_not_ready', 'the application is not loaded yet');
+    await app.edit({ description: change.bio });
+  }
+}
+
+export async function setProfile(
+  id: string,
+  args: Record<string, unknown>,
+): Promise<void> {
+  const accountId = accountFor({ account: args.account as string | undefined });
+  const acct = accounts.get(accountId);
+  if (!acct) {
+    respond(id, { error: `unknown account '${accountId}'` });
+    return;
+  }
+  const change = parseProfileChange(args);
+  await applyProfile(acct.client, change);
+  const result: ProfileApplied = { account: accountId, applied: fieldsOf(change) };
+  respond(id, { result });
+}

package/runtime/node_modules/@metro-labs/discord-bot/src/station.ts

@@ -1,4 +1,5 @@
 import type { GroupOp, Station, Verb } from '@metro-labs/core/stations/types';
+import { PROFILE_FIELDS, type ProfileField } from '@metro-labs/core/stations/profile';
 
 export const discordBotStation: Station = {
   name: 'discord-bot',
@@ -15,5 +16,6 @@ export const discordBotStation: Station = {
   ]),
   groupOps: new Set<GroupOp>(['create_group', 'add_members', 'remove_members']),
   attachmentMode: 'canonical',
+  profileFields: new Set<ProfileField>(PROFILE_FIELDS),
   tools: [],
 };

package/runtime/node_modules/@metro-labs/telegram/src/actions.ts

@@ -14,6 +14,7 @@ import {
   type CanonicalAttachment,
 } from './media-actions.js';
 import { clampLimit, shapeHistory } from './history.js';
+import { makeSetProfile } from './profile.js';
 import { fetchMembers, isRestricted, restrictedMemberList } from './members.js';
 import {
   groupAddMembers,
@@ -248,6 +249,7 @@ export function makeHandleCall(
       groupAddMembers: makeGroupAdd(clientFor),
       groupRemoveMembers: makeGroupRemove(clientFor),
       groupInviteLink: makeGroupInvite(clientFor),
+      set_profile: makeSetProfile(clientFor),
     },
     normalize: normalizeTelegramUser,
   });

package/runtime/node_modules/@metro-labs/telegram/src/profile.ts

@@ -0,0 +1,36 @@
+import type { TelegramClient } from '@mtcute/bun';
+import {
+  assertImage,
+  fieldsOf,
+  parseProfileChange,
+  type ProfileApplied,
+  type ProfileChange,
+} from '@metro-labs/core/stations/profile';
+import { respond, type StationHandler } from '@metro-labs/core/stations/station-runtime';
+import { str } from '@metro-labs/core/str';
+import { accountFor } from './accounts.js';
+import type { UserClient } from './client.js';
+
+const BIO_MAX = 70;
+
+export async function applyProfile(tg: TelegramClient, change: ProfileChange): Promise<void> {
+  if (change.name !== undefined || change.bio !== undefined)
+    await tg.updateProfile({
+      ...(change.name === undefined ? {} : { firstName: change.name }),
+      ...(change.bio === undefined ? {} : { bio: change.bio.slice(0, BIO_MAX) }),
+    });
+  if (change.avatar !== undefined) {
+    assertImage(change.avatar);
+    await tg.setMyProfilePhoto({ type: 'photo', media: `file:${change.avatar.path}` });
+  }
+}
+
+export function makeSetProfile(clientFor: (accountId: string) => UserClient): StationHandler {
+  return async (id, args) => {
+    const accountId = accountFor({ account: str(args.account) });
+    const change = parseProfileChange(args);
+    await applyProfile(clientFor(accountId).tg, change);
+    const result: ProfileApplied = { account: accountId, applied: fieldsOf(change) };
+    respond(id, { result });
+  };
+}

package/runtime/node_modules/@metro-labs/telegram/src/station.ts

@@ -1,4 +1,5 @@
 import type { GroupOp, Station, Verb } from '@metro-labs/core/stations/types';
+import { PROFILE_FIELDS, type ProfileField } from '@metro-labs/core/stations/profile';
 
 export const telegramStation: Station = {
   name: 'telegram',
@@ -20,5 +21,6 @@ export const telegramStation: Station = {
     'invite_link',
   ]),
   attachmentMode: 'canonical',
+  profileFields: new Set<ProfileField>(PROFILE_FIELDS),
   tools: [],
 };

package/runtime/node_modules/@metro-labs/telegram-bot/src/actions.ts

@@ -23,6 +23,7 @@ import {
   sendLocation,
   sendMedia,
 } from './media-actions.js';
+import { setProfile } from './profile.js';
 
 
 
@@ -271,6 +272,7 @@ const HANDLERS: Record<string, StationHandler> = {
   edit,
   delete: remove,
   listMembers,
+  set_profile: setProfile,
   send_photo: (id, args) =>
     media(id, 'sendPhoto', 'photo', ((args.caption as string) ?? '') + ' [image]', args),
   send_document: (id, args) =>

package/runtime/node_modules/@metro-labs/telegram-bot/src/profile.ts

@@ -0,0 +1,33 @@
+import { appendFile } from '@metro-labs/core/stations/attachments';
+import {
+  assertImage,
+  fieldsOf,
+  parseProfileChange,
+  type ProfileApplied,
+  type ProfileAvatar,
+  type ProfileChange,
+} from '@metro-labs/core/stations/profile';
+import { accountFor, tg, tgForm } from './accounts.js';
+import { respond } from './wire.js';
+
+async function setPhoto(accountId: string, avatar: ProfileAvatar): Promise<void> {
+  assertImage(avatar);
+  const form = new FormData();
+  form.append('photo', JSON.stringify({ type: 'static', photo: 'attach://avatar' }));
+  await appendFile(form, 'avatar', avatar.path, avatar.name);
+  await tgForm(accountId, 'setMyProfilePhoto', form);
+}
+
+export async function applyProfile(accountId: string, change: ProfileChange): Promise<void> {
+  if (change.name !== undefined) await tg(accountId, 'setMyName', { name: change.name });
+  if (change.bio !== undefined) await tg(accountId, 'setMyDescription', { description: change.bio });
+  if (change.avatar !== undefined) await setPhoto(accountId, change.avatar);
+}
+
+export async function setProfile(id: string, args: Record<string, unknown>): Promise<void> {
+  const accountId = accountFor({ account: args.account as string | undefined });
+  const change = parseProfileChange(args);
+  await applyProfile(accountId, change);
+  const result: ProfileApplied = { account: accountId, applied: fieldsOf(change) };
+  respond(id, { result });
+}

package/runtime/node_modules/@metro-labs/telegram-bot/src/station.ts

@@ -1,4 +1,5 @@
 import type { Station, Verb } from '@metro-labs/core/stations/types';
+import { PROFILE_FIELDS, type ProfileField } from '@metro-labs/core/stations/profile';
 
 export const telegramBotStation: Station = {
   name: 'telegram-bot',
@@ -13,5 +14,6 @@ export const telegramBotStation: Station = {
     'delete',
   ]),
   attachmentMode: 'canonical',
+  profileFields: new Set<ProfileField>(PROFILE_FIELDS),
   tools: [],
 };

package/runtime/node_modules/@metro-labs/whatsapp/src/actions.ts

@@ -10,6 +10,7 @@ import {
 import { accountFor, accounts, targetOf } from './accounts.js';
 import { normalizeWhatsApp } from './normalize.js';
 import { phoneNumberOf, senderLookup } from './resolve.js';
+import { assertImage, fieldsOf, parseProfileChange, type ProfileApplied } from '@metro-labs/core/stations/profile';
 import type { WAClient } from './client.js';
 
 type Args = Record<string, unknown>;
@@ -173,6 +174,17 @@ function makeResolveSender(clientFor: ClientFor): StationHandler {
   };
 }
 
+function makeSetProfile(clientFor: ClientFor): StationHandler {
+  return async (id, args) => {
+    const accountId = accountFor({ account: str(args.account) });
+    const change = parseProfileChange(args);
+    if (change.avatar !== undefined) assertImage(change.avatar);
+    await guard(() => clientFor(accountId).setProfile(change));
+    const result: ProfileApplied = { account: accountId, applied: fieldsOf(change) };
+    respond(id, { result });
+  };
+}
+
 export function makeHandleCall(
   clientFor: ClientFor,
 ): (msg: CallMsg) => Promise<void> {
@@ -184,6 +196,7 @@ export function makeHandleCall(
       edit: makeEdit(clientFor),
       delete: makeDelete(clientFor),
       resolve_sender: makeResolveSender(clientFor),
+      set_profile: makeSetProfile(clientFor),
     },
     normalize: normalizeWhatsApp,
   });

package/runtime/node_modules/@metro-labs/whatsapp/src/client.ts

@@ -13,6 +13,7 @@ import { errMsg } from '@metro-labs/core/log';
 import type { WhatsAppAccount } from './types.js';
 import type { InboundMessage, ReactionInput } from './format.js';
 import type { SenderFound } from './resolve.js';
+import type { ProfileChange } from '@metro-labs/core/stations/profile';
 import { toInbound, toReaction, type ReactionEvent, type SelfRef } from './parse.js';
 import { baileysLogger } from './logger.js';
 import { useAccountAuthState } from './auth-state.js';
@@ -51,6 +52,7 @@ export interface WAClient {
   deleteMessage(jid: string, messageId: string): Promise<void>;
   reuploadMedia(m: WAMessage): Promise<WAMessage>;
   lookupSender(number: string): Promise<SenderFound>;
+  setProfile(change: ProfileChange): Promise<void>;
   disconnect(): Promise<void>;
 }
 
@@ -335,6 +337,16 @@ export function createClient(account: WhatsAppAccount): WAClient {
       const jid = jidNormalizedUser(found.jid);
       return { exists: true, jid, lid: await lidFor(st, sock, jid) };
     },
+    async setProfile(change) {
+      const sock = await ready(st);
+      if (change.name !== undefined) await sock.updateProfileName(change.name);
+      if (change.bio !== undefined) await sock.updateProfileStatus(change.bio);
+      if (change.avatar !== undefined) {
+        const me = sock.user?.id;
+        if (me === undefined) throw new TrainError('whatsapp_call', 'own jid unknown');
+        await sock.updateProfilePicture(me, { url: change.avatar.path });
+      }
+    },
     async disconnect() {
       st.closed = true;
       try {

package/runtime/node_modules/@metro-labs/whatsapp/src/station.ts

@@ -1,4 +1,5 @@
 import type { Station, Verb } from '@metro-labs/core/stations/types';
+import { PROFILE_FIELDS, type ProfileField } from '@metro-labs/core/stations/profile';
 
 export const whatsappStation: Station = {
   name: 'whatsapp',
@@ -13,6 +14,7 @@ export const whatsappStation: Station = {
     'delete',
   ]),
   attachmentMode: 'canonical',
+  profileFields: new Set<ProfileField>(PROFILE_FIELDS),
   resolvesSenders: true,
   tools: [],
 };

package/runtime/runtime.json

@@ -1,3 +1,3 @@
 {
-  "version": "0.1.0-beta.152"
+  "version": "0.1.0-beta.153"
 }