@stage-labs/metro 0.1.0-beta.284 → 0.1.0-beta.286

package/dist/claude.js

@@ -44,6 +44,8 @@ export function gatewayEnv(base, agentKey, port) {
 }
 export const channelEnv = (env) => set(env, 'MCP_PROTOCOL_NEGOTIATION') ? env : { ...env, MCP_PROTOCOL_NEGOTIATION: 'legacy' };
 export const toolSearchEnv = (env) => set(env, 'ENABLE_TOOL_SEARCH') ? env : { ...env, ENABLE_TOOL_SEARCH: 'true' };
+const RM_PROMPT_OFF = 'CLAUDE_CODE_DISABLE_INLINE_SHELL_RM_PROMPT';
+export const rmPromptEnv = (env) => set(env, RM_PROMPT_OFF) ? env : { ...env, [RM_PROMPT_OFF]: '1' };
 const OWN_CREDENTIALS = ['ANTHROPIC_API_KEY', 'ANTHROPIC_AUTH_TOKEN'];
 export function credentialEnv(env, agentKey, signedIn) {
     if (signedIn || OWN_CREDENTIALS.some((name) => set(env, name)))
@@ -164,7 +166,7 @@ function inferenceEnv(decision, port) {
     return process.env;
 }
 export async function headlessEnv() {
-    return keepInSession(inferenceEnv(await verdict(), localPort()));
+    return keepInSession(rmPromptEnv(inferenceEnv(await verdict(), localPort())));
 }
 const continues = (args) => args.includes('-c') || args.includes('--continue');
 async function reclaimConversation(extra) {
@@ -194,7 +196,7 @@ export async function launchClaude(extra) {
     if (prompt !== null)
         process.stderr.write('metro claude: the system prompt from the Harness page is appended to this session\n');
     try {
-        return await runClaude(claudeArgs(nativeRecoveryArgs(extra), mcp?.path, mode, prompt), keepInSession(channelEnv(inferenceEnv(decision, port))));
+        return await runClaude(claudeArgs(nativeRecoveryArgs(extra), mcp?.path, mode, prompt), keepInSession(rmPromptEnv(channelEnv(inferenceEnv(decision, port)))));
     }
     finally {
         mcp?.cleanup();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stage-labs/metro",
-  "version": "0.1.0-beta.284",
+  "version": "0.1.0-beta.286",
   "description": "The metro command line: run your agent on this machine, relaying its chat channels and connectors to Claude Code.",
   "license": "MIT",
   "repository": {

package/runtime/marketplace/plugin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "metro",
-  "version": "0.1.0-beta.284",
+  "version": "0.1.0-beta.286",
   "description": "Metro for Claude Code, installed by the metro daemon on this machine: every connector the agent holds as its own MCP server relayed through the daemon, the orchestrator-only guard on the main thread, and the standing rules loaded at each session start. No vendor credential ever sits in a config file.",
   "author": {
     "name": "Bonustrack",

package/runtime/node_modules/@metro-labs/daemon/src/approvals/owner-line.ts

@@ -0,0 +1,45 @@
+import { errMsg, log } from '@metro-labs/core/log';
+import { isRecord } from '@metro-labs/core/is-record';
+import { readJson, writeSecure } from '@metro-labs/core/secure-fs';
+
+export interface OwnerLine {
+  line: string;
+  from: string;
+}
+
+let file: string | undefined;
+let known: OwnerLine | undefined;
+let saved: string | undefined;
+
+const textOf = (owner: OwnerLine): string => JSON.stringify({ line: owner.line, from: owner.from });
+
+function parse(raw: unknown): OwnerLine | undefined {
+  if (!isRecord(raw) || typeof raw.line !== 'string' || typeof raw.from !== 'string') return undefined;
+  return raw.line.startsWith('metro://') && raw.from.startsWith('metro://') ? { line: raw.line, from: raw.from } : undefined;
+}
+
+export function setOwnerLineFile(path: string): void {
+  file = path;
+  known = parse(readJson<unknown>(path, null, { warn: 'approvals: the owner chat file is not valid JSON, so it was ignored' }));
+  saved = known === undefined ? undefined : textOf(known);
+}
+
+export const ownerLine = (): OwnerLine | undefined => known;
+
+export function noteOwnerLine(line: string, from: string): void {
+  known = { line, from };
+  const next = textOf(known);
+  if (file === undefined || next === saved) return;
+  try {
+    writeSecure(file, `${next}\n`);
+    saved = next;
+  } catch (err) {
+    log.warn({ err: errMsg(err) }, 'approvals: the owner chat could not be saved, so it is kept in memory only');
+  }
+}
+
+export function forgetOwnerLine(): void {
+  file = undefined;
+  known = undefined;
+  saved = undefined;
+}

package/runtime/node_modules/@metro-labs/daemon/src/boot/boot.ts

@@ -41,6 +41,7 @@ import { localSessionApis } from '../routes/local-mode.js';
 import type { SessionApis } from '../routes/session-apis.js';
 import { createMetroMcp } from '../mcp/index.js';
 import { startPromptExpiry } from '../approvals/pending.js';
+import { setOwnerLineFile } from '../approvals/owner-line.js';
 import { watchPolicySnapshot } from '../mcp/policy-snapshot.js';
 import { gatherAccountsForAgents } from '../mcp/accounts.js';
 import { stationToolGroups } from '../mcp/tool-catalog.js';
@@ -61,6 +62,7 @@ import { isCallEvent, leaveCallsForShutdown, onCallEvent, sweepLeftoverCalls } f
 
 installCrashGuard();
 acquireLock(join(STATE_DIR, '.tail-lock'));
+setOwnerLineFile(join(STATE_DIR, 'approval-line.json'));
 
 log.info({ self: userSelf() }, 'user identity');
 

package/runtime/node_modules/@metro-labs/daemon/src/channels/inbound.ts

@@ -8,6 +8,7 @@ import {
 } from './media-note.js';
 import { buildWebhookNote } from './webhook-note.js';
 import { replyMeta } from './addressed.js';
+import { reactContent, reactionEmoji } from './react-note.js';
 import {
   capSet,
   displayNameMeta,
@@ -32,26 +33,13 @@ const accountStrippedLine = (line: string): string => {
 const dedupeKey = (station: string, line: string, kind: string, messageId: string): string =>
   `${station} ${accountStrippedLine(line)} ${kind} ${messageId}`;
 
-const shortId = (id: string): string => (id.length > 10 ? `${id.slice(0, 6)}…` : id);
-
-function reactionEmoji(raw: unknown): string {
-  if (typeof raw === 'string') return raw;
-  const obj = raw as { name?: string; reaction?: string } | undefined;
-  return obj?.name ?? obj?.reaction ?? '';
-}
-
-function reactContent(emoji: string, target: string, removed: boolean): string {
-  const verb = removed ? 'removed from' : 'reacted to';
-  const label = removed ? emoji || 'reaction' : emoji || 'reacted';
-  return `${label} ${verb} message ${shortId(target)}`.trim();
-}
-
 interface InboundDeps {
   mcp: Server;
   log: (...a: unknown[]) => void;
   getStations: () => Set<string>;
   senderAllowed: (from: string, line: string, verified?: boolean) => boolean;
   approves?: (station: string) => boolean;
+  noteDirect?: (line: string, from: string) => void;
   callMeta?: (event: Record<string, unknown>) => () => Record<string, string>;
   answerPermission?: (requestId: string, behavior: 'allow' | 'deny', line: string, from: string) => Promise<boolean>;
 }
@@ -287,8 +275,11 @@ export class InboundRelay {
     return this.deps.approves?.(station) !== false;
   }
 
-  private noteLine(base: EventBase): void {
-    if (base.evType !== 'system' && this.approves(base.station)) this.lastLine = base.line;
+  private noteLine(base: EventBase, direct: boolean): void {
+    if (base.evType !== 'system' && this.approves(base.station)) {
+      this.lastLine = base.line;
+      if (direct) this.deps.noteDirect?.(base.line, base.from);
+    }
     if (!base.line) return;
     this.allowedLines.add(base.line);
     capSet(this.allowedLines, ALLOWED_LINES_MAX);
@@ -372,7 +363,7 @@ export class InboundRelay {
 
     const base = this.routable(ev, replay);
     if (!base) return;
-    this.noteLine(base);
+    this.noteLine(base, ev.isPrivate === true);
 
     const atts = (ev.payload as { attachments?: PendingAtt[] } | undefined)
       ?.attachments;

package/runtime/node_modules/@metro-labs/daemon/src/channels/react-note.ts

@@ -0,0 +1,13 @@
+const shortId = (id: string): string => (id.length > 10 ? `${id.slice(0, 6)}…` : id);
+
+export function reactionEmoji(raw: unknown): string {
+  if (typeof raw === 'string') return raw;
+  const obj = raw as { name?: string; reaction?: string } | undefined;
+  return obj?.name ?? obj?.reaction ?? '';
+}
+
+export function reactContent(emoji: string, target: string, removed: boolean): string {
+  const verb = removed ? 'removed from' : 'reacted to';
+  const label = removed ? emoji || 'reaction' : emoji || 'reacted';
+  return `${label} ${verb} message ${shortId(target)}`.trim();
+}

package/runtime/node_modules/@metro-labs/daemon/src/mcp/frame-schema.ts

@@ -0,0 +1,40 @@
+export const frameSchema = {
+  type: 'object',
+  description:
+    'Stage (XMTP) only: a frame, a small interactive view. Stage shows it in the chat at image size ' +
+    '(400 x 400 at most, its start screen, clipped with a fade) and opens it full screen on a tap; its ' +
+    'buttons work only there. `widget` is OpenAI ChatKit widget JSON (a Card, ListView ' +
+    'or Basic root, 64K characters at most); a missing `title` or `description` is taken from the ' +
+    'widget. Or give `screens` instead of `widget` for several screens in one frame. A tap there comes back ' +
+    'to you as a reply to the frame: "Frame action: <type> <payload ' +
+    "JSON>\". It is sent after the text, and the message_id returned is the frame's. The stage " +
+    'skill lists the widget nodes, with an example.',
+  properties: {
+    widget: {
+      type: 'object',
+      description:
+        'ChatKit widget JSON, e.g. {"type":"Card","children":[{"type":"Title","value":"Deploy?"},' +
+        '{"type":"Button","label":"Ship it","onClickAction":{"type":"deploy","payload":{"env":"prod"}}}]}.',
+      additionalProperties: true,
+    },
+    screens: {
+      type: 'object',
+      description:
+        'Instead of `widget`: up to 50 screens by id, each a widget or {"title", "widget"}, 64K ' +
+        'characters in all. An action {"type":"frame.open","payload":{"screen":"<id>"}} opens a ' +
+        'screen and {"type":"frame.back"} goes back, in Stage, with no message to you.',
+      additionalProperties: true,
+    },
+    start: { type: 'string', description: 'Required with `screens`: the id of the first screen.' },
+    title: { type: 'string', description: 'Card title in the chat (200 characters at most).' },
+    description: { type: 'string', description: 'Card description in the chat (1000 characters at most).' },
+    source: {
+      type: 'object',
+      description:
+        'Optional: {"url": "https://…"}, a node URL that serves this widget live (2048 characters at most). ' +
+        'Add to dashboard on the frame then adds a live widget loaded from that URL instead of a copy.',
+      properties: { url: { type: 'string' } },
+      required: ['url'],
+    },
+  },
+} as const;

package/runtime/node_modules/@metro-labs/daemon/src/mcp/permission-relay.ts

@@ -2,7 +2,9 @@ import type { Server } from '@modelcontextprotocol/sdk/server/index.js';
 import { z } from 'zod';
 import type { InboundRelay } from '../channels/inbound.js';
 import { cancelPrompt, holdPrompt, type Behavior } from '../approvals/pending.js';
-import { approversForLine, lineReceives } from '../agents/map.js';
+import { ownerLine, type OwnerLine } from '../approvals/owner-line.js';
+import { approversForLine, lineReceives, mayApprove } from '../agents/map.js';
+import { sharedCalls } from '../voice/shared.js';
 import { metroCall } from './ctx.js';
 import { promptBody } from './permission-prompt.js';
 import { permissionCall } from './call-permission.js';
@@ -34,12 +36,20 @@ export interface PermissionRelayDeps {
   log: (...a: unknown[]) => void;
 }
 
+const callChat = (deps: PermissionRelayDeps): string | undefined => {
+  const route = sharedCalls.snapshot();
+  return route !== null && deps.inScope(route.line) ? route.line : undefined;
+};
+
+const ownerChat = (deps: PermissionRelayDeps, owner: OwnerLine | undefined): string | undefined =>
+  owner !== undefined && mayApprove(owner.line, owner.from) && deps.inScope(owner.line) && lineReceives(owner.line) ? owner.line : undefined;
+
 function relayLine(deps: PermissionRelayDeps, requestId: string, callLine?: string): string | undefined {
   if (!deps.live()) {
     deps.log('permission_request: live events are off, so no chat answer can arrive; held for the page only', requestId);
     return undefined;
   }
-  const line = callLine ?? deps.relay.knownLine;
+  const line = callLine ?? callChat(deps) ?? ownerChat(deps, ownerLine()) ?? deps.relay.knownLine;
   if (!line) {
     deps.log('permission_request: no known line, held for the page only', requestId);
     return undefined;

package/runtime/node_modules/@metro-labs/daemon/src/mcp/session.ts

@@ -2,6 +2,7 @@ import { Server } from '@modelcontextprotocol/sdk/server/index.js';
 import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
 import { InboundRelay } from '../channels/inbound.js';
 import { answerPrompt, forgetPromptsOf, promptLine } from '../approvals/pending.js';
+import { noteOwnerLine } from '../approvals/owner-line.js';
 import { ChannelRelay, type ReplayLedger } from '../channels/relay.js';
 import { errMsg } from '@metro-labs/core/log';
 import { allowlistForLine, mayApprove, senderPermitted } from '../agents/map.js';
@@ -26,6 +27,10 @@ const senderAllowed = (from: string, line: string, verified?: boolean): boolean
 
 const approves = (station: string): boolean => stationByName(station)?.approvals !== false;
 
+const noteDirect = (line: string, from: string): void => {
+  if (mayApprove(line, from)) noteOwnerLine(line, from);
+};
+
 async function answerPermission(requestId: string, behavior: 'allow' | 'deny', line: string, from: string): Promise<boolean> {
   if (promptLine(requestId) !== line || !mayApprove(line, from)) return false;
   return (await answerPrompt(requestId, behavior, 'chat', line)) !== undefined;
@@ -115,6 +120,7 @@ export class McpSession {
       getStations,
       senderAllowed,
       approves,
+      noteDirect,
       answerPermission,
       callMeta: (event) => voice ? () => ({}) : sharedCalls.bindChat(event, this.scope),
     });

package/runtime/node_modules/@metro-labs/daemon/src/mcp/tool-schemas.ts

@@ -1,5 +1,6 @@
 import type { ToolDef } from './tool-def.js';
 import { attachmentItem, CREATE_UPLOAD_TOOL } from './attachment-schema.js';
+import { frameSchema } from './frame-schema.js';
 import { speechSchema } from './speech-schema.js';
 
 const lineProp = {
@@ -69,38 +70,7 @@ export const COMMON_TOOLS: ToolDef[] = [
           description: 'Optional files to attach.',
           items: attachmentItem,
         },
-        frame: {
-          type: 'object',
-          description:
-            'Stage (XMTP) only: a frame, a small interactive view. Stage shows it in the chat at image size ' +
-            '(400 x 400 at most, its start screen, clipped with a fade) and opens it full screen on a tap; its ' +
-            'buttons work only there. `widget` is OpenAI ChatKit widget JSON (a Card, ListView ' +
-            'or Basic root, 64K characters at most); a missing `title` or `description` is taken from the ' +
-            'widget. Or give `screens` instead of `widget` for several screens in one frame. A tap there comes back ' +
-            'to you as a reply to the frame: "Frame action: <type> <payload ' +
-            "JSON>\". It is sent after the text, and the message_id returned is the frame's. The stage " +
-            'skill lists the widget nodes, with an example.',
-          properties: {
-            widget: {
-              type: 'object',
-              description:
-                'ChatKit widget JSON, e.g. {"type":"Card","children":[{"type":"Title","value":"Deploy?"},' +
-                '{"type":"Button","label":"Ship it","onClickAction":{"type":"deploy","payload":{"env":"prod"}}}]}.',
-              additionalProperties: true,
-            },
-            screens: {
-              type: 'object',
-              description:
-                'Instead of `widget`: up to 50 screens by id, each a widget or {"title", "widget"}, 64K ' +
-                'characters in all. An action {"type":"frame.open","payload":{"screen":"<id>"}} opens a ' +
-                'screen and {"type":"frame.back"} goes back, in Stage, with no message to you.',
-              additionalProperties: true,
-            },
-            start: { type: 'string', description: 'Required with `screens`: the id of the first screen.' },
-            title: { type: 'string', description: 'Card title in the chat (200 characters at most).' },
-            description: { type: 'string', description: 'Card description in the chat (1000 characters at most).' },
-          },
-        },
+        frame: frameSchema,
         wallet: {
           type: 'object',
           description:

package/runtime/node_modules/@metro-labs/xmtp/src/codecs.ts

@@ -196,6 +196,7 @@ export interface FrameContent {
   widget?: Record<string, unknown>;
   screens?: Record<string, unknown>;
   start?: string;
+  source?: { url: string };
 }
 export const frameFallback = (c: FrameContent): string => {
   const head = c.title ? `Frame: ${c.title}` : 'Frame';

package/runtime/node_modules/@metro-labs/xmtp/src/emit.ts

@@ -21,7 +21,7 @@ export function envelope(
     line,
     from: `metro://xmtp/${accountId}/user/${msg.senderInboxId}`,
     message_id: msg.id,
-    is_private: typeof (conv as unknown as { peerInboxId?: unknown }).peerInboxId === 'function',
+    is_private: 'peerInboxId' in conv,
   };
   rememberUid(base.id, msg.id);
   if (typeof c === 'string')

package/runtime/node_modules/@metro-labs/xmtp/src/frames.ts

@@ -7,6 +7,7 @@ const MAX_SCREEN_ID = 120;
 const FRAME_OPEN = 'frame.open';
 const MAX_TITLE = 200;
 const MAX_DESCRIPTION = 1000;
+const MAX_SOURCE_URL = 2048;
 const SUMMARY_SCAN = 80;
 const TEXT_TYPES = new Set(['Text', 'Caption', 'Markdown']);
 
@@ -150,6 +151,16 @@ function frameBody(args: Node): FrameBody {
   return parseScreens(args.screens, args.start);
 }
 
+function sourcePart(raw: unknown): Pick<FrameContent, 'source'> {
+  if (raw === undefined) return {};
+  const url = isNode(raw) && typeof raw.url === 'string' ? raw.url.trim() : '';
+  if (url.length > MAX_SOURCE_URL)
+    throw bad(`frame source url is ${url.length} characters; the limit is ${MAX_SOURCE_URL}`);
+  if (!URL.canParse(url) || new URL(url).protocol !== 'https:')
+    throw bad('frame source must be {"url": "https://…"}, the node that serves this widget');
+  return { source: { url } };
+}
+
 export function buildFrameContent(raw: unknown): { frame: FrameContent; title: string } {
   const args = parseJson(raw, 'frame');
   if (!isNode(args))
@@ -162,6 +173,7 @@ export function buildFrameContent(raw: unknown): { frame: FrameContent; title: s
     ...(title ? { title } : {}),
     ...(description && description !== title ? { description } : {}),
     ...body.content,
+    ...sourcePart(args.source),
   };
   return { frame, title: title ?? 'Frame' };
 }

package/runtime/runtime.json

@@ -1,3 +1,3 @@
 {
-  "version": "0.1.0-beta.284"
+  "version": "0.1.0-beta.286"
 }

package/runtime/sdk-runner/runner.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.1.0-beta.284",
+  "version": "0.1.0-beta.286",
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "0.3.287",
     "@modelcontextprotocol/sdk": "^1.29.0",