@stage-labs/metro 0.1.0-beta.193 → 0.1.0-beta.194

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stage-labs/metro",
-  "version": "0.1.0-beta.193",
+  "version": "0.1.0-beta.194",
   "description": "The metro command line. Sign in once per machine, then hand your MCP connector list to Claude Code without the credentials touching disk, argv or shell history.",
   "license": "MIT",
   "repository": {

package/runtime/marketplace/plugin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "metro",
-  "version": "0.1.0-beta.193",
+  "version": "0.1.0-beta.194",
   "description": "Metro for Claude Code, installed by the metro daemon on this machine: every connector the agent holds as its own MCP server relayed through the daemon, the orchestrator-only guard on the main thread, and the standing rules loaded at each session start. No vendor credential ever sits in a config file.",
   "author": {
     "name": "Bonustrack",

package/runtime/node_modules/@metro-labs/daemon/src/agents/accounts-api.ts

@@ -1,6 +1,8 @@
 import type { IncomingMessage, ServerResponse } from 'node:http';
 import { errMsg, log } from '@metro-labs/core/log';
-import { normalizeAllowlist } from './allowlist.js';
+import { normalizeAllowlist, normalizeApprovers } from './allowlist.js';
+import { approversForAccount } from './map.js';
+import { isRecord } from '@metro-labs/core/is-record';
 import type { RecentSender } from './senders.js';
 import { ApiError } from '@metro-labs/http/api-error';
 import {
@@ -68,6 +70,7 @@ export interface AccountApiDeps {
     station: StationName,
     accountId: string,
     allowlist: string[],
+    approvers?: string[],
   ) => Promise<string[]>;
   setPolicy: SetPolicy;
   recentSenders: (station: StationName, accountId: string) => RecentSender[];
@@ -279,14 +282,18 @@ async function handleAllowlist(
   agentId: string,
   target: { station: StationName; accountId: string },
 ): Promise<void> {
-  const wanted = normalizeAllowlist(bodyField(await readJsonBody(req), 'allowlist'));
-  const allowlist = await deps.setAllowlist(agentId, target.station, target.accountId, wanted);
+  const body = await readJsonBody(req);
+  const wanted = normalizeAllowlist(bodyField(body, 'allowlist'));
+  const asked = isRecord(body) && 'approvers' in body ? body.approvers : approversForAccount(target.station, target.accountId);
+  const approvers = normalizeApprovers(asked, wanted);
+  const allowlist = await deps.setAllowlist(agentId, target.station, target.accountId, wanted, approvers);
   log.info({ agentId, station: target.station, account: target.accountId, senders: allowlist.length }, 'account-api: allowlist set');
   sendJson(req, res, 200, {
     agentId,
     station: target.station,
     accountId: target.accountId,
     allowlist,
+    approvers,
     activated: await applied(deps),
   });
 }

package/runtime/node_modules/@metro-labs/daemon/src/agents/allowlist.ts

@@ -29,6 +29,19 @@ function senderId(entry: unknown): string {
   return value.startsWith('@') ? domainEntry(value) : value;
 }
 
+export function normalizeApprovers(raw: unknown, allowlist: string[]): string[] {
+  if (raw === undefined) return [];
+  if (!Array.isArray(raw)) throw new ApiError('approvers must be a list of sender ids', 400);
+  const listed = new Set(allowlist.map((entry) => entry.toLowerCase()));
+  const seen = new Set<string>();
+  return raw.map(senderId).filter((value) => {
+    const key = value.toLowerCase();
+    if (!listed.has(key) || seen.has(key)) return false;
+    seen.add(key);
+    return true;
+  });
+}
+
 export function normalizeAllowlist(raw: unknown): string[] {
   if (!Array.isArray(raw)) throw new ApiError('allowlist must be a list of sender ids', 400);
   if (raw.length > MAX_ENTRIES) throw new ApiError(`allowlist holds at most ${String(MAX_ENTRIES)} senders`, 400);

package/runtime/node_modules/@metro-labs/daemon/src/agents/bundle.ts

@@ -7,6 +7,7 @@ import { isRecord } from '@metro-labs/core/is-record';
 import { parseId } from '@metro-labs/core/ids';
 import type { LoadedAccount, LoadedAgent, LoadedConnector } from '../stations/materialize.js';
 import { STATIONS } from '@metro-labs/core/station-names';
+import { approversOf } from './files.js';
 
 const AGENTS = '/api/agents';
 const RESTORE_PATH = `${AGENTS}/restore`;
@@ -60,6 +61,7 @@ function stationOf(raw: unknown): LoadedAccount {
     station: raw.station as LoadedAccount['station'],
     id: raw.id,
     allowlist,
+    ...approversOf(raw.approvers),
     enabled: raw.enabled !== false,
     ...(policy === undefined ? {} : { policy }),
     config: raw.config,

package/runtime/node_modules/@metro-labs/daemon/src/agents/file-admin.ts

@@ -243,12 +243,15 @@ export async function localSetAllowlist(
   station: StationName,
   accountId: string,
   allowlist: string[],
+  approvers: string[] = [],
   dir = agentsDir(),
 ): Promise<string[]> {
   const stored = agentOrThrow(agentId, dir);
   const account = stored.file.stations.find((a) => a.station === station && a.id === accountId);
   if (account === undefined) throw new AgentAdminError('no such account on this agent', 404);
   account.allowlist = allowlist;
+  if (approvers.length === 0) delete account.approvers;
+  else account.approvers = approvers;
   save(stored);
   return Promise.resolve(allowlist);
 }

package/runtime/node_modules/@metro-labs/daemon/src/agents/files.ts

@@ -49,6 +49,12 @@ function allowlistOf(raw: unknown, path: string, where: string): string[] | null
   return list;
 }
 
+export function approversOf(raw: unknown): { approvers?: string[] } {
+  if (!Array.isArray(raw)) return {};
+  const list = raw.filter((entry): entry is string => typeof entry === 'string' && entry !== '*' && entry.trim() !== '');
+  return list.length === 0 ? {} : { approvers: list };
+}
+
 function stationOf(raw: unknown, path: string, index: number): LoadedAccount {
   const where = `stations[${String(index)}]`;
   if (!isRecord(raw)) fail(path, `${where} is not an object`);
@@ -62,6 +68,7 @@ function stationOf(raw: unknown, path: string, index: number): LoadedAccount {
     station,
     id,
     allowlist: allowlistOf(raw.allowlist, path, where),
+    ...approversOf(raw.approvers),
     enabled: raw.enabled !== false,
     ...(policy === undefined ? {} : { policy }),
     config,

package/runtime/node_modules/@metro-labs/daemon/src/agents/map.ts

@@ -8,6 +8,7 @@ const mapKey = (station: string, accountId: string): string =>
 let agentMap: AgentMap = {};
 let agentNames: AgentNameMap = {};
 let allowlistMap: AllowlistMap = {};
+let approversMap: AllowlistMap = {};
 let disabledAccounts = new Set<string>();
 
 export function setAgentMap(map: AgentMap, names: AgentNameMap): void {
@@ -19,6 +20,22 @@ export function setAllowlistMap(map: AllowlistMap): void {
   allowlistMap = map;
 }
 
+export function setApproversMap(map: AllowlistMap): void {
+  approversMap = map;
+}
+
+export const approversForAccount = (station: string, accountId: string): string[] => approversMap[mapKey(station, accountId)] ?? [];
+
+export function approversForLine(line: string): string[] {
+  const a = accountFromLine(line);
+  return a ? approversForAccount(a.station, a.accountId) : [];
+}
+
+export const mayApprove = (line: string, from: string): boolean => {
+  const approvers = approversForLine(line);
+  return approvers.length > 0 && senderMatchesAllowlist(approvers, from);
+};
+
 export function setDisabledAccounts(ids: Set<string>): void {
   disabledAccounts = ids;
 }

package/runtime/node_modules/@metro-labs/daemon/src/channels/inbound.ts

@@ -29,7 +29,7 @@ interface InboundDeps {
   getStations: () => Set<string>;
   senderAllowed: (from: string, line: string, verified?: boolean) => boolean;
   approves?: (station: string) => boolean;
-  answerPermission?: (requestId: string, behavior: 'allow' | 'deny', line: string) => Promise<boolean>;
+  answerPermission?: (requestId: string, behavior: 'allow' | 'deny', line: string, from: string) => Promise<boolean>;
 }
 
 const ATTACH_TIMEOUT_MS = 15_000;
@@ -253,7 +253,7 @@ export class InboundRelay {
     if (answer === undefined || base.evType !== 'msg' || !this.approves(base.station) || ev.senderVerified === false) return false;
     const m = PERMISSION_REPLY_RE.exec(base.text);
     if (m?.[1] === undefined || m[2] === undefined) return false;
-    return answer(m[2].toLowerCase(), m[1].toLowerCase().startsWith('y') ? 'allow' : 'deny', base.line);
+    return answer(m[2].toLowerCase(), m[1].toLowerCase().startsWith('y') ? 'allow' : 'deny', base.line, base.from);
   }
 
   private approves(station: string): boolean {

package/runtime/node_modules/@metro-labs/daemon/src/mcp/accounts.ts

@@ -6,7 +6,7 @@ import {
 } from '../stations/registry.js';
 import { listEndpoints } from '../stations/webhook-endpoints.js';
 import { hookUrl, threemaCallbackUrl } from '../stations/attach.js';
-import { accountEnabled, agentIdForAccount, allowlistForAccount, knownAccounts, type KnownAccount } from '../agents/map.js';
+import { accountEnabled, agentIdForAccount, allowlistForAccount, approversForAccount, knownAccounts, type KnownAccount } from '../agents/map.js';
 
 const accountId = (acc: unknown): string | undefined => {
   const id = (acc as { id?: unknown }).id;
@@ -28,7 +28,9 @@ function withAgentId(station: string, acc: unknown): unknown {
   const allowlist = allowlistForAccount(station, id);
   const stored = storedPolicy({ kind: 'channel', station, account: id });
   const policy = stored === undefined ? {} : { policy: stored };
-  const tagged = allowlist === undefined ? { ...rec, agentId, ...policy } : { ...rec, agentId, allowlist, ...policy };
+  const approvers = approversForAccount(station, id);
+  const extra = approvers.length === 0 ? policy : { ...policy, approvers };
+  const tagged = allowlist === undefined ? { ...rec, agentId, ...extra } : { ...rec, agentId, allowlist, ...extra };
   return accountEnabled(station, id) ? tagged : { ...tagged, enabled: false };
 }
 

package/runtime/node_modules/@metro-labs/daemon/src/mcp/permission-relay.ts

@@ -2,6 +2,7 @@ import type { Server } from '@modelcontextprotocol/sdk/server/index.js';
 import { z } from 'zod';
 import type { InboundRelay } from '../channels/inbound.js';
 import { holdPrompt, type Behavior } from '../approvals/pending.js';
+import { approversForLine } from '../agents/map.js';
 import { metroCall } from './ctx.js';
 import { promptBody } from './permission-prompt.js';
 
@@ -40,6 +41,10 @@ function relayLine(deps: PermissionRelayDeps, requestId: string): string | undef
     deps.log('permission_request: known line is outside the agent scope, held for the page only', requestId);
     return undefined;
   }
+  if (approversForLine(line).length === 0) {
+    deps.log('permission_request: nobody on that chat may approve, held for the page only', requestId);
+    return undefined;
+  }
   return line;
 }
 

package/runtime/node_modules/@metro-labs/daemon/src/mcp/session.ts

@@ -4,7 +4,7 @@ import { InboundRelay } from '../channels/inbound.js';
 import { answerPrompt, forgetPromptsOf, promptLine } from '../approvals/pending.js';
 import { ChannelRelay, type ReplayLedger } from '../channels/relay.js';
 import { errMsg } from '@metro-labs/core/log';
-import { allowlistForLine, senderPermitted } from '../agents/map.js';
+import { allowlistForLine, mayApprove, senderPermitted } from '../agents/map.js';
 import { accountStationNames, stationByName } from '../stations/registry.js';
 import { eventInScope } from '../agents/scope.js';
 import { MCP_INSTRUCTIONS } from './instructions.js';
@@ -24,8 +24,8 @@ const senderAllowed = (from: string, line: string, verified?: boolean): boolean
 
 const approves = (station: string): boolean => stationByName(station)?.approvals !== false;
 
-async function answerPermission(requestId: string, behavior: 'allow' | 'deny', line: string): Promise<boolean> {
-  if (promptLine(requestId) !== line) return false;
+async function answerPermission(requestId: string, behavior: 'allow' | 'deny', line: string, from: string): Promise<boolean> {
+  if (promptLine(requestId) !== line || !mayApprove(line, from)) return false;
   return (await answerPrompt(requestId, behavior, 'chat', line)) !== undefined;
 }
 

package/runtime/node_modules/@metro-labs/daemon/src/stations/materialize.ts

@@ -14,6 +14,7 @@ import { trainsDir } from '../boot/paths.js';
 import {
   setAgentMap,
   setAllowlistMap,
+  setApproversMap,
   setDisabledAccounts,
   type AgentMap,
   type AgentNameMap,
@@ -32,6 +33,7 @@ export interface LoadedAccount {
   station: StationName;
   id: string;
   allowlist: string[] | null;
+  approvers?: string[];
   enabled?: boolean;
   policy?: ToolPolicy;
   config: Record<string, unknown>;
@@ -137,6 +139,11 @@ const channelPolicies = (list: LoadedAgent[]): [PolicyTarget, ToolPolicy][] =>
     ),
   );
 
+const approversOf = (list: LoadedAgent[]): Record<string, string[]> =>
+  Object.fromEntries(
+    list.flatMap((agent) => agent.accounts.flatMap((a) => (a.approvers === undefined ? [] : [[`${a.station}/${a.id}`, a.approvers]]))),
+  );
+
 function writeStations(list: LoadedAgent[]): WrittenStations {
   mkdirSync(METRO_DIR, { recursive: true });
   mkdirSync(trainsDir(), { recursive: true });
@@ -169,6 +176,7 @@ function writeStations(list: LoadedAgent[]): WrittenStations {
   }
   setAgentMap(map, names);
   setAllowlistMap(allow);
+  setApproversMap(approversOf(list));
   setDisabledAccounts(disabled);
   setPolicies('channel', channelPolicies(list));
 

package/runtime/runtime.json

@@ -1,3 +1,3 @@
 {
-  "version": "0.1.0-beta.193"
+  "version": "0.1.0-beta.194"
 }