@stage-labs/metro 0.1.0-beta.2 → 0.1.0-beta.200

package/runtime/node_modules/@metro-labs/daemon/src/mcp/tool-dispatch.ts

@@ -0,0 +1,225 @@
+import { createHash } from 'node:crypto';
+import { Line } from '@metro-labs/core/lines';
+import type { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import {
+  ListToolsRequestSchema,
+  CallToolRequestSchema,
+} from '@modelcontextprotocol/sdk/types.js';
+import { gatherAccounts } from './accounts.js';
+import {
+  STATIONS,
+  accountStationCapabilities,
+} from '../stations/registry.js';
+import type { Station, StationTool, ToolResult } from '@metro-labs/core/stations/types';
+import { listedTools, stationForTool, type PublishedTool } from './tool-catalog.js';
+import { policyGate, withEffectivePolicy } from './policy-gate.js';
+import { settlePromptsFor } from '../approvals/pending.js';
+import { errResult, makeCtx, okJson, toErr } from './ctx.js';
+import { dispatchMessageTool, type ToolHooks } from './call-tools.js';
+import { dispatchListMembers } from './member-tools.js';
+import {
+  dispatchAddMembers,
+  dispatchCreateGroup,
+  dispatchInviteLink,
+  dispatchRemoveMembers,
+} from './group-tools.js';
+import { dispatchCreateUpload } from './upload-tool.js';
+import { dispatchSetProfile, profileCapabilities } from './profile-tool.js';
+import { dispatchGetProfile, profileScopeLine } from './profile-lookup.js';
+import { callTargetDenied, lineTargetDenied } from '../agents/scope.js';
+import { SOURCE_KEYS } from '../stations/attach-resolve.js';
+import { decodedLengthOf } from '../stations/attach-inline.js';
+import { log } from '@metro-labs/core/log';
+import {
+  allowedAgents,
+  currentIdentity,
+  type RequestIdentity,
+} from './request-identity.js';
+import { str } from '@metro-labs/core/str';
+import { linelessRead, stationOfAccount } from './read-tool.js';
+
+const STATION_TOOLS = new Map<
+  string,
+  { station: Station; tool: StationTool }
+>();
+for (const s of STATIONS)
+  for (const t of s.tools) STATION_TOOLS.set(t.name, { station: s, tool: t });
+
+const CORE_DISPATCH: Record<
+  string,
+  (a: Record<string, unknown>) => Promise<ToolResult>
+> = {
+  list_members: dispatchListMembers,
+  create_group: dispatchCreateGroup,
+  add_members: dispatchAddMembers,
+  remove_members: dispatchRemoveMembers,
+  export_invite: dispatchInviteLink,
+  create_upload: dispatchCreateUpload,
+  set_profile: dispatchSetProfile,
+  get_profile: dispatchGetProfile,
+};
+
+export const toolList = (): { tools: PublishedTool[] } => ({ tools: listedTools() });
+
+let schemaSignature: string | undefined;
+
+export const toolSchemaSignature = (): string => {
+  schemaSignature ??= createHash('sha256')
+    .update(JSON.stringify(toolList()))
+    .digest('hex')
+    .slice(0, 16);
+  return schemaSignature;
+};
+
+async function handleListAccounts(
+  identity: RequestIdentity | undefined,
+): Promise<ToolResult> {
+  try {
+    return okJson({
+      accounts: withEffectivePolicy(await gatherAccounts(allowedAgents(identity))),
+      capabilities: accountStationCapabilities(),
+      profiles: profileCapabilities(),
+    });
+  } catch (e) {
+    return errResult(`metro list_accounts failed: ${String(e)}`);
+  }
+}
+
+export function scopeDenied(
+  identity: RequestIdentity | undefined,
+  name: string,
+  args: Record<string, unknown>,
+): boolean {
+  const allowed = allowedAgents(identity);
+  if (name === 'read' && !str(args.line)) {
+    const account = str(args.account);
+    if (!account) return false;
+    const station = stationOfAccount(account);
+    return station === undefined || callTargetDenied(allowed, station, args);
+  }
+  if (name === 'get_profile') {
+    const line = profileScopeLine(args);
+    return line === undefined || callTargetDenied(allowed, Line.station(line) ?? '', { line });
+  }
+  const station = stationForTool(name, args);
+  if (station !== undefined) return callTargetDenied(allowed, station, args);
+  return lineTargetDenied(allowed, args);
+}
+
+const sourceOf = (entry: unknown): string => {
+  const att = (entry ?? {}) as Record<string, unknown>;
+  const named = SOURCE_KEYS.filter(
+    (k) => typeof att[k] === 'string' && att[k] !== '',
+  );
+  if (named.length === 0) return 'none';
+  return named
+    .map((k) =>
+      k === 'data' ? `data(${decodedLengthOf(String(att.data))}B)` : k,
+    )
+    .join('+');
+};
+
+export const attachmentShape = (
+  a: Record<string, unknown>,
+): string[] | undefined =>
+  Array.isArray(a.attachments) ? a.attachments.map(sourceOf) : undefined;
+
+function logToolFailure(
+  name: string,
+  a: Record<string, unknown>,
+  result: ToolResult,
+): void {
+  log.warn(
+    {
+      tool: name,
+      agents: [...allowedAgents(currentIdentity())],
+      line: str(a.line),
+      attachments: attachmentShape(a),
+      err: result.content[0]?.text,
+    },
+    'mcp: tool call failed',
+  );
+}
+
+async function runTool(
+  req: { params: { name: string; arguments?: Record<string, unknown> } },
+  hooks: ToolHooks,
+): Promise<ToolResult> {
+  const name = req.params.name;
+  const a = req.params.arguments ?? {};
+
+  const identity = currentIdentity();
+  if (name !== 'list_accounts' && scopeDenied(identity, name, a))
+    return errResult('metro: this account is outside your authorized scope');
+
+  const blocked = policyGate(name, a);
+  if (blocked) return blocked;
+  settlePromptsFor(name, a);
+
+  return dispatchTool(name, a, identity, hooks);
+}
+
+async function dispatchTool(
+  name: string,
+  a: Record<string, unknown>,
+  identity: RequestIdentity | undefined,
+  hooks: ToolHooks,
+): Promise<ToolResult> {
+  const owned = STATION_TOOLS.get(name);
+  if (owned) {
+    try {
+      return await owned.tool.handle(a, makeCtx(owned.station.name));
+    } catch (e) {
+      return toErr(name, e);
+    }
+  }
+  const core = CORE_DISPATCH[name];
+  if (core) return core(a);
+  if (name === 'list_accounts') return handleListAccounts(identity);
+  if (name === 'read' && !str(a.line)) return linelessRead(a);
+  return dispatchMessageTool(name, a, hooks);
+}
+
+export async function callToolHandler(
+  req: { params: { name: string; arguments?: Record<string, unknown> } },
+  hooks: ToolHooks = {},
+): Promise<ToolResult> {
+  const result = await runTool(req, hooks);
+  if (result.isError === true)
+    logToolFailure(req.params.name, req.params.arguments ?? {}, result);
+  return result;
+}
+
+const TOOL_LIST_CHANGED = 'notifications/tools/list_changed';
+
+export interface SchemaNotice {
+  markCurrent: () => void;
+  deliver: (send: () => Promise<void>) => void;
+}
+
+interface NotifyingExtra {
+  sendNotification: (n: { method: string }) => Promise<void>;
+}
+
+export function registerToolHandlers(
+  server: Server,
+  notice?: SchemaNotice,
+  hooks: ToolHooks = {},
+): void {
+  server.setRequestHandler(ListToolsRequestSchema, () => {
+    notice?.markCurrent();
+    return toolList();
+  });
+  server.setRequestHandler(
+    CallToolRequestSchema,
+    ((
+      req: { params: { name: string; arguments?: Record<string, unknown> } },
+      extra: NotifyingExtra,
+    ): Promise<ToolResult> => {
+      notice?.deliver(() =>
+        extra.sendNotification({ method: TOOL_LIST_CHANGED }),
+      );
+      return callToolHandler(req, hooks);
+    }) as Parameters<typeof server.setRequestHandler>[1],
+  );
+}

package/runtime/node_modules/@metro-labs/daemon/src/mcp/tool-schemas.ts

@@ -0,0 +1,333 @@
+import type { ToolDef } from './tool-def.js';
+import { attachmentItem, CREATE_UPLOAD_TOOL } from './attachment-schema.js';
+
+const lineProp = {
+  type: 'string',
+  description:
+    'The metro:// line (from the inbound <channel> tag). The station is derived from it.',
+} as const;
+const msgIdProp = {
+  type: 'string',
+  description: 'The target message_id.',
+} as const;
+
+export const COMMON_TOOLS: ToolDef[] = [
+  {
+    name: 'reply',
+    group: 'write',
+    description:
+      'Reply to a specific message in a Metro conversation (text quotes the target). Args: ' +
+      "line, message_id, text. The station is derived from the line. Returns the daemon's " +
+      'reason if the station does not support replies.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        line: lineProp,
+        message_id: msgIdProp,
+        text: { type: 'string', description: 'The reply text.' },
+      },
+      required: ['line', 'message_id', 'text'],
+    },
+  },
+  {
+    name: 'send',
+    group: 'write',
+    description:
+      'Send a message (and/or media) to a Metro conversation. Args: line, text?, reply_to?, ' +
+      'subject?, attachments?. The station is derived from the line. Outlook: send to ' +
+      'metro://outlook/<account>/<email address> to start a new email (subject defaults to the ' +
+      'first line of text); the result names the new thread line. Each attachment names EXACTLY ONE ' +
+      'source, and the choice matters: `upload` (an `upload_id` from `create_upload`, the ' +
+      'route for any real file on your own machine, confidential or not, up to 64 MiB); ' +
+      '`data` (base64 inline -- TINY FILES ONLY, a few KB, because the base64 has to be ' +
+      'written out verbatim in the call and longer than that it corrupts); `url` (the daemon ' +
+      'fetches it, so the file must already be public); `path` (resolved on the DAEMON host, ' +
+      'which is not your machine). At least one of text/attachments is required. ' +
+      'The success line names each attachment the station actually delivered; a station that ' +
+      'cannot carry a file errors instead of reporting success.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        line: lineProp,
+        text: {
+          type: 'string',
+          description: 'The message text (optional if sending only media).',
+        },
+        reply_to: {
+          type: 'string',
+          description: 'Optional message_id to quote/reply to.',
+        },
+        subject: {
+          type: 'string',
+          description: 'Outlook only: the subject of a new email.',
+        },
+        attachments: {
+          type: 'array',
+          description: 'Optional files to attach.',
+          items: attachmentItem,
+        },
+      },
+      required: ['line'],
+    },
+  },
+  {
+    name: 'react',
+    group: 'write',
+    description:
+      'Add an emoji reaction to a message. Args: line, message_id, emoji. The station is derived from the line.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        line: lineProp,
+        message_id: msgIdProp,
+        emoji: { type: 'string', description: 'The emoji to react with.' },
+      },
+      required: ['line', 'message_id', 'emoji'],
+    },
+  },
+  {
+    name: 'unreact',
+    group: 'write',
+    description:
+      'Remove an emoji reaction from a message. Args: line, message_id, emoji. The station is derived from the line.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        line: lineProp,
+        message_id: msgIdProp,
+        emoji: {
+          type: 'string',
+          description: 'The emoji reaction to remove.',
+        },
+      },
+      required: ['line', 'message_id', 'emoji'],
+    },
+  },
+  {
+    name: 'edit',
+    group: 'write',
+    description:
+      'Edit the text of a message you sent. Args: line, message_id, text. The station is ' +
+      "derived from the line. Returns the daemon's reason if the station does not support edits.",
+    inputSchema: {
+      type: 'object',
+      properties: {
+        line: lineProp,
+        message_id: msgIdProp,
+        text: { type: 'string', description: 'The new message text.' },
+      },
+      required: ['line', 'message_id', 'text'],
+    },
+  },
+  {
+    name: 'delete',
+    group: 'write',
+    destructive: true,
+    description:
+      'Delete a message you sent. Args: line, message_id. The station is derived from the line. ' +
+      "Returns the daemon's reason if the station does not support deletes.",
+    inputSchema: {
+      type: 'object',
+      properties: { line: lineProp, message_id: msgIdProp },
+      required: ['line', 'message_id'],
+    },
+  },
+  {
+    name: 'read',
+    group: 'read',
+    description:
+      'Read message history. Args: line?, account?, limit?, before?, since?, until?, query?, ' +
+      'from?, unread_only?, message_id?. Give a line to read one conversation, or an account ' +
+      '(from list_accounts) instead of a line to read across that whole account, where the ' +
+      'station allows it. `message_id` returns that one message in full, with its files saved ' +
+      'like inbound media (url and local_path). Each station applies the filters it supports; ' +
+      'the answer lists any it did not apply in `ignored`, so check it. Returns the raw JSON ' +
+      "(shapes differ per station), or the daemon's reason if the station does not support " +
+      'reads. Outlook: `query` is a Microsoft search over all mail (with `from` folded into it; ' +
+      'line, since, until and unread_only then narrow what the search found), and without ' +
+      '`query` every filter is applied by Outlook itself, newest first.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        line: lineProp,
+        account: {
+          type: 'string',
+          description: 'An account id from list_accounts, to read the whole account when you give no line.',
+        },
+        limit: { type: 'number', description: 'Max messages to return.' },
+        before: {
+          type: 'string',
+          description: 'Return messages before this message_id.',
+        },
+        since: {
+          type: 'string',
+          description: 'Return messages since this timestamp.',
+        },
+        until: {
+          type: 'string',
+          description: 'Return messages before this timestamp.',
+        },
+        query: { type: 'string', description: 'Free text to search for.' },
+        from: { type: 'string', description: 'Only messages from this sender (an id or an address).' },
+        unread_only: { type: 'boolean', description: 'Only messages not read yet.' },
+        message_id: { type: 'string', description: 'Return this one message in full.' },
+      },
+    },
+  },
+  {
+    name: 'list_members',
+    group: 'read',
+    description:
+      'List the members of a Metro group/channel in a station-agnostic shape. Args: line, ' +
+      'limit?. The station is derived from the line. Returns {line, station, memberCount, ' +
+      'members:[{id, name?, display_name?, address?, roles?, is_admin?, is_bot?}], capability:' +
+      '{supported, complete, reason?, total?}}. Each station fills the fields it has (xmtp: id=' +
+      'inboxId + address; discord-bot: id + username/nick + roles + is_bot; telegram-bot/telegram: ' +
+      'id + username/first_name). Never throws on "not supported": stations that cannot ' +
+      'enumerate (e.g. the Telegram Bot API) return an empty or partial list with a reason in ' +
+      '`capability`. Check `capability.complete` before assuming the roster is exhaustive.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        line: lineProp,
+        limit: {
+          type: 'number',
+          description: 'Max members to return (best-effort; capped per station).',
+        },
+      },
+      required: ['line'],
+    },
+  },
+  {
+    name: 'create_group',
+    group: 'write',
+    description:
+      'Create a new group/channel on a station and add members, in a station-agnostic shape. ' +
+      'Args: station (required, xmtp|telegram|discord-bot|telegram-bot), name (required), members? ' +
+      '(string[]; xmtp: 0x address or inboxId, telegram: @username or user id, discord-bot: ' +
+      'user id), account? (which station account), parent? (discord-bot only: the metro:// line of ' +
+      'the channel to open the thread under). Returns {op, line (the NEW group line), station, ' +
+      'supported, reason?, id?, name?, members:[{id, status: added|invited|removed|failed, ' +
+      'reason?}], inviteLink?}. Never throws on "not supported": stations that lack the op ' +
+      '(e.g. the Telegram Bot API) return {supported:false, reason}. Telegram direct-add is ' +
+      'limited to mutual contacts / permissive privacy — members who cannot be added come back ' +
+      'as status "invited" and an `inviteLink` is returned to share with them.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        station: {
+          type: 'string',
+          description: 'The station to create the group on (xmtp|telegram|discord-bot).',
+        },
+        name: { type: 'string', description: 'The group/channel name.' },
+        members: {
+          type: 'array',
+          description: 'Members to seed the group with (station-specific identifiers).',
+          items: { type: 'string' },
+        },
+        account: {
+          type: 'string',
+          description: 'Station account to create under (defaults to the station default).',
+        },
+        parent: {
+          type: 'string',
+          description:
+            'Discord only: the metro:// line of the channel to create the thread under.',
+        },
+      },
+      required: ['station', 'name'],
+    },
+  },
+  {
+    name: 'add_members',
+    group: 'write',
+    description:
+      'Add members to an existing Metro group, in a station-agnostic shape. Args: line ' +
+      '(required), members? (string[]; station-specific identifiers). xmtp also accepts ' +
+      'addresses? (0x[]) and inboxIds? (string[]) for backward compatibility. The station is ' +
+      'derived from the line. Returns {op, line, station, supported, reason?, members:[{id, ' +
+      'status, reason?}], inviteLink?}. Never throws on "not supported". On Telegram, members ' +
+      'who cannot be direct-added come back status "invited" with an `inviteLink`.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        line: lineProp,
+        members: {
+          type: 'array',
+          description: 'Members to add (station-specific identifiers).',
+          items: { type: 'string' },
+        },
+        addresses: {
+          type: 'array',
+          description: 'xmtp only: Ethereum 0x addresses to add.',
+          items: { type: 'string' },
+        },
+        inboxIds: {
+          type: 'array',
+          description: 'xmtp only: XMTP inboxIds to add.',
+          items: { type: 'string' },
+        },
+      },
+      required: ['line'],
+    },
+  },
+  {
+    name: 'remove_members',
+    group: 'write',
+    destructive: true,
+    description:
+      'Remove members from an existing Metro group, in a station-agnostic shape. Args: line ' +
+      '(required), members? (string[]). xmtp also accepts addresses?/inboxIds? for backward ' +
+      'compatibility. The station is derived from the line. Returns {op, line, station, ' +
+      'supported, reason?, members:[{id, status, reason?}]}. Never throws on "not supported".',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        line: lineProp,
+        members: {
+          type: 'array',
+          description: 'Members to remove (station-specific identifiers).',
+          items: { type: 'string' },
+        },
+        addresses: {
+          type: 'array',
+          description: 'xmtp only: Ethereum 0x addresses to remove.',
+          items: { type: 'string' },
+        },
+        inboxIds: {
+          type: 'array',
+          description: 'xmtp only: XMTP inboxIds to remove.',
+          items: { type: 'string' },
+        },
+      },
+      required: ['line'],
+    },
+  },
+  {
+    name: 'export_invite',
+    group: 'write',
+    description:
+      'Get a join/invite link for a Metro group, for platforms where direct-add is not always ' +
+      'permitted. Args: line (required). The station is derived from the line. Returns {op, ' +
+      'line, station, supported, reason?, inviteLink?}. Only telegram supports this today; ' +
+      'other stations return {supported:false, reason}. Never throws on "not supported".',
+    inputSchema: {
+      type: 'object',
+      properties: { line: lineProp },
+      required: ['line'],
+    },
+  },
+  CREATE_UPLOAD_TOOL,
+];
+
+export const LIST_ACCOUNTS_TOOL: ToolDef = {
+  name: 'list_accounts',
+  group: 'read',
+  description:
+    'List the configured messaging accounts across all stations (PUBLIC identity only: ' +
+    'addresses, bot ids/usernames). No args. Never returns tokens, private keys, or the ' +
+    'mnemonic. Also returns `capabilities`: the ' +
+    'message verbs (send/reply/react/unreact/edit/delete/read) each station honors, so a ' +
+    'verb need not be discovered by trial and error.',
+  inputSchema: { type: 'object', properties: {} },
+};

package/runtime/node_modules/@metro-labs/daemon/src/mcp/upload-tool.ts

@@ -0,0 +1,61 @@
+import { publicBaseOrDefault } from '../files/attach-serve.js';
+import { safeFileName } from '../stations/attach-inline.js';
+import { guessMime } from '@metro-labs/core/stations/attachments';
+import {
+  createUploadSlot,
+  issueUploadTicket,
+  MAX_UPLOAD_BYTES,
+  removeUpload,
+  UPLOAD_TTL_MS,
+} from '../files/upload-store.js';
+import type { ToolResult } from '@metro-labs/core/stations/types';
+import { errResult, okJson } from './ctx.js';
+import { allowedAgents, currentIdentity } from './request-identity.js';
+import { str } from '@metro-labs/core/str';
+
+const ttlMinutes = (): number => Math.round(UPLOAD_TTL_MS / 60_000);
+
+const NO_AGENT =
+  'create_upload needs an agent credential; this session is not scoped to one agent';
+
+type OwnerAgent = { agentId: string } | { error: string };
+
+function ownerAgent(): OwnerAgent {
+  const allowed = allowedAgents(currentIdentity());
+  const [only] = [...allowed];
+  return allowed.size === 1 && only !== undefined ? { agentId: only } : { error: NO_AGENT };
+}
+
+export function dispatchCreateUpload(
+  a: Record<string, unknown>,
+): Promise<ToolResult> {
+  const owner = ownerAgent();
+  if ('error' in owner) return Promise.resolve(errResult(owner.error));
+  const agentId = owner.agentId;
+  const name = safeFileName(str(a.name) || undefined);
+  const mime = str(a.mime) || guessMime(name);
+  const id = createUploadSlot(agentId, { name, mime });
+  const token = issueUploadTicket(id, agentId);
+  if (token === undefined) {
+    removeUpload(id);
+    return Promise.resolve(errResult('metro could not reserve an upload slot'));
+  }
+  const url = `${publicBaseOrDefault()}/api/uploads/${id}?token=${token}`;
+  return Promise.resolve(
+    okJson({
+      upload_id: id,
+      upload_url: url,
+      curl: `curl -sS -T '<the file on your own machine>' '${url}'`,
+      name,
+      mime,
+      max_bytes: MAX_UPLOAD_BYTES,
+      expires_in_minutes: ttlMinutes(),
+      next:
+        'Run that command in a shell, then attach the file with ' +
+        `send({line, attachments:[{upload:'${id}'}]}). The url is single-use, is good ` +
+        `only for this one file, and expires in ${ttlMinutes()} minutes. If you have no ` +
+        'shell, delegate the one command to a subagent that does and keep the upload_id; ' +
+        'the slot belongs to this metro agent, not to whoever runs the command.',
+    }),
+  );
+}

package/runtime/node_modules/@metro-labs/daemon/src/metro-user/api.ts

@@ -0,0 +1,43 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import { readFileSync } from 'node:fs';
+import { sessionRoute } from '@metro-labs/http/api-http';
+import { MOVE_LOG, moveState, startMove } from './move.js';
+import { rootHelper, runningAsMetro, runningAsRoot } from './privilege.js';
+import { HELPER_VERSION } from './helper-script.js';
+
+const PATH = '/api/server/metro-user';
+const LOG_TAIL = 40;
+
+function logTail(): string {
+  try {
+    return readFileSync(MOVE_LOG, 'utf8').split('\n').slice(-LOG_TAIL).join('\n');
+  } catch {
+    return '';
+  }
+}
+
+function helperVersion(): number | null {
+  if (!runningAsMetro()) return null;
+  const v = Number(rootHelper(['version']).stdout.trim());
+  return Number.isInteger(v) ? v : null;
+}
+
+function view(): unknown {
+  const runningAs = runningAsRoot() ? 'root' : runningAsMetro() ? 'metro' : 'other';
+  const helper = helperVersion();
+  return {
+    runningAs,
+    canMove: runningAs === 'root',
+    move: moveState(),
+    log: logTail(),
+    helper,
+    helperCurrent: runningAs !== 'metro' || helper === HELPER_VERSION,
+  };
+}
+
+export function handleMetroUserRequest(req: IncomingMessage, res: ServerResponse): boolean {
+  return sessionRoute(req, res, { methods: { [PATH]: ['GET', 'POST'] }, admin: true, label: 'metro-user-api' }, () => {
+    if (req.method === 'POST') startMove();
+    return Promise.resolve(view());
+  });
+}