@stage-labs/metro 0.1.0-beta.243 → 0.1.0-beta.244

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stage-labs/metro",
-  "version": "0.1.0-beta.243",
+  "version": "0.1.0-beta.244",
   "description": "The metro command line: run your agent on this machine, relaying its chat channels and connectors to Claude Code.",
   "license": "MIT",
   "repository": {

package/runtime/marketplace/plugin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "metro",
-  "version": "0.1.0-beta.243",
+  "version": "0.1.0-beta.244",
   "description": "Metro for Claude Code, installed by the metro daemon on this machine: every connector the agent holds as its own MCP server relayed through the daemon, the orchestrator-only guard on the main thread, and the standing rules loaded at each session start. No vendor credential ever sits in a config file.",
   "author": {
     "name": "Bonustrack",

package/runtime/node_modules/@metro-labs/daemon/src/agent-user/metro-home.ts

@@ -0,0 +1,42 @@
+import { chmodSync, lstatSync, readdirSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { isAbsolute, join, relative, sep } from 'node:path';
+import { errMsg, log } from '@metro-labs/core/log';
+
+const CLI_PREFIX = '.npm-global';
+const OPEN_BITS = 0o077;
+
+function entryHolding(home: string, path: string): string | null {
+  const rel = relative(home, path);
+  if (rel === '' || rel.startsWith('..') || isAbsolute(rel)) return null;
+  return rel.split(sep)[0] ?? null;
+}
+
+function sharedEntries(home: string, env: NodeJS.ProcessEnv = process.env): Set<string> {
+  const cli = env.METRO_CLI_BIN?.trim() ?? '';
+  const holding = cli === '' ? null : entryHolding(home, cli);
+  return new Set(holding === null ? [CLI_PREFIX] : [CLI_PREFIX, holding]);
+}
+
+function closeEntry(path: string): boolean {
+  const stat = lstatSync(path);
+  if (stat.isSymbolicLink() || (stat.mode & OPEN_BITS) === 0) return false;
+  chmodSync(path, stat.mode & 0o700);
+  return true;
+}
+
+export function closeMetroHome(home = homedir(), env: NodeJS.ProcessEnv = process.env): string[] {
+  chmodSync(home, 0o711);
+  const shared = sharedEntries(home, env);
+  const closed: string[] = [];
+  for (const name of readdirSync(home)) {
+    if (shared.has(name)) continue;
+    try {
+      if (closeEntry(join(home, name))) closed.push(name);
+    } catch (err) {
+      log.warn({ entry: name, err: errMsg(err) }, 'agent-user: could not close an entry of the metro home');
+    }
+  }
+  if (closed.length > 0) log.info({ closed }, 'agent-user: closed entries of the metro home so the agent user cannot read them');
+  return closed;
+}

package/runtime/node_modules/@metro-labs/daemon/src/agent-user/provision.ts

@@ -7,6 +7,7 @@ import { errMsg, log } from '@metro-labs/core/log';
 import { copyIntoHome } from './home-fs.js';
 import { AGENT_NAME, agentMarketplaceDir, agentUser, agentUserExpected, asUser, claudeBin, forgetAgentUser, type AgentUser } from './user.js';
 import { watchAgentView } from './view.js';
+import { closeMetroHome } from './metro-home.js';
 import { mustHelper } from '../metro-user/privilege.js';
 import { stagedPluginVersion } from '../claude/plugin-install.js';
 
@@ -22,7 +23,7 @@ function run(file: string, args: string[]): void {
 }
 
 function openMetroHome(): void {
-  chmodSync(homedir(), 0o711);
+  closeMetroHome();
   chmodSync(join(homedir(), '.metro'), 0o700);
 }
 

package/runtime/node_modules/@metro-labs/daemon/src/agent-user/view.ts

@@ -4,6 +4,7 @@ import { errMsg, log } from '@metro-labs/core/log';
 import { isRecord } from '@metro-labs/core/is-record';
 import { agentsDir } from '../agents/files.js';
 import { removeHome, writeHomeText } from './home-fs.js';
+import { closeMetroHome } from './metro-home.js';
 import { agentUser, agentViewDir, type AgentUser } from './user.js';
 
 const COPIED = ['policy.json', 'claude-setup.json', 'system-prompt.md'] as const;
@@ -80,6 +81,11 @@ export function watchAgentView(everyMs = SYNC_MS): void {
     } catch (err) {
       log.warn({ err: errMsg(err) }, 'agent-user: could not refresh the Metro files the agent may read');
     }
+    try {
+      closeMetroHome();
+    } catch (err) {
+      log.warn({ err: errMsg(err) }, 'agent-user: could not close the metro home');
+    }
   };
   tick();
   timer = setInterval(tick, everyMs);

package/runtime/node_modules/@metro-labs/daemon/src/mcp/accounts.ts

@@ -138,11 +138,20 @@ async function loadStations(): Promise<ScopedAccounts> {
   return { accounts, unavailable };
 }
 
+const URL_SECRETS = new Set(['endpoint', 'callback']);
+
+function withoutUrlSecrets(acc: unknown): unknown {
+  const rec = asRecord(acc);
+  if (rec === undefined) return acc;
+  return Object.fromEntries(Object.entries(rec).filter(([key]) => !URL_SECRETS.has(key)));
+}
+
 export async function gatherAccounts(
   allowedAgents?: Set<string>,
 ): Promise<Record<string, unknown[]>> {
   const { accounts } = await loadStations();
-  return allowedAgents ? scopeAccountsByAgent(accounts, allowedAgents) : accounts;
+  const scoped = allowedAgents ? scopeAccountsByAgent(accounts, allowedAgents) : accounts;
+  return Object.fromEntries(Object.entries(scoped).map(([station, rows]) => [station, rows.map(withoutUrlSecrets)]));
 }
 
 export async function gatherAccountsForAgents(

package/runtime/runtime.json

@@ -1,3 +1,3 @@
 {
-  "version": "0.1.0-beta.243"
+  "version": "0.1.0-beta.244"
 }