@stage-labs/metro 0.1.0-beta.31 → 0.1.0-beta.310

package/runtime/node_modules/@metro-labs/mcp/src/monitor/api.ts

@@ -1,240 +0,0 @@
-import type { IncomingMessage, ServerResponse } from 'node:http';
-import { stationByName } from '../stations/registry.js';
-import { errMsg, log } from '../daemon/log.js';
-import { subscribeEvents, type MetroEvent } from '../daemon/events.js';
-import { callTargetDenied, eventInScope } from '../db/agent-scope.js';
-import { hasAnyKey } from '../db/key-map.js';
-import {
-  allowedAgents,
-  authConfigFromEnv,
-  authenticate,
-} from '../mcp/request-identity.js';
-
-export type MonitorCall = (
-  train: string,
-  action: string,
-  args: Record<string, unknown>,
-) => Promise<{ result: unknown }>;
-
-const KEEPALIVE_MS = 25_000;
-const CALL_BODY_MAX = 256 * 1024;
-const METRO_VERSION = process.env.npm_package_version ?? '0.1.0-beta.15';
-
-function monitorEnabled(): boolean {
-  return hasAnyKey() || authConfigFromEnv().sessionSecret !== '';
-}
-
-function cors(req: IncomingMessage): Record<string, string> {
-  return {
-    'access-control-allow-origin': req.headers.origin ?? '*',
-    'access-control-allow-methods': 'GET, POST, OPTIONS',
-    'access-control-allow-headers': 'Authorization, Content-Type',
-    'access-control-max-age': '86400',
-    vary: 'Origin',
-  };
-}
-
-function sendJson(
-  res: ServerResponse,
-  req: IncomingMessage,
-  status: number,
-  body: unknown,
-): void {
-  res.writeHead(status, { 'content-type': 'application/json', ...cors(req) });
-  res.end(JSON.stringify(body));
-}
-
-function parseCallArgs(raw: string): Record<string, unknown> {
-  if (!raw) return {};
-  const parsed = JSON.parse(raw) as { args?: unknown };
-  const value =
-    parsed && typeof parsed === 'object' && 'args' in parsed
-      ? parsed.args
-      : parsed;
-  if (!value || typeof value !== 'object' || Array.isArray(value))
-    throw new Error('call body must be a JSON object');
-  return value as Record<string, unknown>;
-}
-
-async function readCallArgs(
-  req: IncomingMessage,
-): Promise<Record<string, unknown>> {
-  const chunks: Buffer[] = [];
-  let total = 0;
-  for await (const chunk of req) {
-    const buf = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk as string);
-    total += buf.length;
-    if (total > CALL_BODY_MAX)
-      throw new Error(`request body exceeds ${CALL_BODY_MAX} bytes`);
-    chunks.push(buf);
-  }
-  return parseCallArgs(Buffer.concat(chunks).toString('utf8').trim());
-}
-
-function startTailStream(
-  req: IncomingMessage,
-  res: ServerResponse,
-  allowed: Set<string>,
-): void {
-  res.writeHead(200, {
-    'content-type': 'text/event-stream',
-    'cache-control': 'no-cache, no-transform',
-    connection: 'keep-alive',
-    'x-accel-buffering': 'no',
-    ...cors(req),
-  });
-  const timers: { keepalive?: ReturnType<typeof setInterval> } = {};
-  const subs: { stop?: () => void } = {};
-  let done = false;
-  const cleanup = (): void => {
-    if (done) return;
-    done = true;
-    subs.stop?.();
-    if (timers.keepalive) clearInterval(timers.keepalive);
-    try {
-      res.end();
-    } catch {
-      log.debug('monitor: tail cleanup end failed');
-    }
-  };
-  const write = (chunk: string): void => {
-    if (done) return;
-    if (res.destroyed || res.writableEnded) {
-      cleanup();
-      return;
-    }
-    try {
-      res.write(chunk);
-    } catch (err) {
-      log.debug({ err: errMsg(err) }, 'monitor: tail write failed');
-      cleanup();
-    }
-  };
-  write(': metro monitor tail (live)\n\n');
-  let id = 0;
-  subs.stop = subscribeEvents((e: MetroEvent): void => {
-    if (!eventInScope(allowed, e.line)) return;
-    id += 1;
-    write(`id: ${id}\nevent: live\ndata: ${JSON.stringify(e)}\n\n`);
-  });
-  timers.keepalive = setInterval(() => {
-    write(': keepalive\n\n');
-  }, KEEPALIVE_MS);
-  timers.keepalive.unref?.();
-  req.on('close', cleanup);
-  req.on('error', cleanup);
-}
-
-async function handleCall(
-  req: IncomingMessage,
-  res: ServerResponse,
-  train: string,
-  action: string,
-  call: MonitorCall,
-  allowed: Set<string>,
-): Promise<void> {
-  let args: Record<string, unknown>;
-  try {
-    args = await readCallArgs(req);
-  } catch (err) {
-    sendJson(res, req, 400, { error: `bad JSON body: ${errMsg(err)}` });
-    return;
-  }
-  if (callTargetDenied(allowed, train, args)) {
-    sendJson(res, req, 403, {
-      error: 'metro: this account is outside your authorized scope',
-    });
-    return;
-  }
-  if (stationByName(train)?.hasTrain === false) {
-    sendJson(res, req, 400, {
-      error: `metro: station '${train}' runs in-core and takes no calls`,
-    });
-    return;
-  }
-  try {
-    const { result } = await call(train, action, args);
-    sendJson(res, req, 200, { result });
-  } catch (err) {
-    sendJson(res, req, 502, { error: errMsg(err) });
-  }
-}
-
-function routeApi(
-  req: IncomingMessage,
-  res: ServerResponse,
-  path: string,
-  call: MonitorCall,
-  allowed: Set<string>,
-): void {
-  const callMatch = /^\/api\/call\/([^/]+)\/([^/]+)$/.exec(path);
-  if (callMatch) {
-    if (req.method !== 'POST') {
-      sendJson(res, req, 405, { error: 'method not allowed' });
-      return;
-    }
-    handleCall(
-      req,
-      res,
-      callMatch[1] ?? '',
-      callMatch[2] ?? '',
-      call,
-      allowed,
-    ).catch((err: unknown) => {
-      log.warn({ err: errMsg(err) }, 'monitor: call handler error');
-      if (!res.headersSent) sendJson(res, req, 500, { error: errMsg(err) });
-    });
-    return;
-  }
-  if (path === '/api/tail') {
-    if (req.method !== 'GET') {
-      sendJson(res, req, 405, { error: 'method not allowed' });
-      return;
-    }
-    startTailStream(req, res, allowed);
-    return;
-  }
-  sendJson(res, req, 404, { error: 'not found' });
-}
-
-function preflight(
-  req: IncomingMessage,
-  res: ServerResponse,
-  path: string,
-): boolean {
-  if (!monitorEnabled()) {
-    sendJson(res, req, 404, { error: 'not found' });
-    return true;
-  }
-  if (req.method === 'OPTIONS') {
-    res.writeHead(204, cors(req)).end();
-    return true;
-  }
-  if (req.method === 'GET' && path === '/api/health') {
-    sendJson(res, req, 200, {
-      ok: true,
-      service: 'metro',
-      version: METRO_VERSION,
-      uptime_s: Math.round(process.uptime()),
-    });
-    return true;
-  }
-  return false;
-}
-
-export function handleMonitorRequest(
-  req: IncomingMessage,
-  res: ServerResponse,
-  call: MonitorCall,
-): boolean {
-  const path = (req.url ?? '').split('?', 2)[0] ?? '';
-  if (!path.startsWith('/api/')) return false;
-  if (preflight(req, res, path)) return true;
-  const identity = authenticate(req, authConfigFromEnv());
-  if (!identity) {
-    sendJson(res, req, 401, { error: 'unauthorized' });
-    return true;
-  }
-  routeApi(req, res, path, call, allowedAgents(identity));
-  return true;
-}

package/runtime/node_modules/@metro-labs/mcp/src/server.ts

@@ -1,2 +0,0 @@
-#!/usr/bin/env bun
-import './daemon/boot.js';

package/runtime/node_modules/@metro-labs/mcp/src/stations/account-store.ts

@@ -1,80 +0,0 @@
-import { existsSync, readFileSync } from 'node:fs';
-import { errMsg } from '../daemon/log.js';
-import { chmodIfExists } from '../daemon/secure-fs.js';
-
-export type Die = (msg: string) => never;
-
-export interface MakeLoaderOpts<T> {
-  prefix: string;
-  file: string;
-  allowlistEnv: string[];
-  validate: (raw: T[], die: Die) => void;
-}
-
-export interface Loader<T> {
-  die: Die;
-  loadAccounts: () => T[];
-}
-
-export function makeAccountStore<T extends { id: string }>(
-  opts: MakeLoaderOpts<T>,
-): Loader<T> {
-  const die: Die = (msg) => {
-    process.stderr.write(`${opts.prefix}: ${msg}\n`);
-    process.exit(2);
-  };
-
-  let allowlistRaw: string | undefined;
-  for (const k of opts.allowlistEnv) {
-    allowlistRaw ??= process.env[k];
-  }
-  const allowlist = new Set(
-    (allowlistRaw ?? '')
-      .split(',')
-      .map((s) => s.trim())
-      .filter(Boolean),
-  );
-
-  function loadAccounts(): T[] {
-    if (!existsSync(opts.file))
-      return die(
-        `no accounts file ${opts.file} — the daemon writes it from the database at boot; set DATABASE_URL and populate the accounts table`,
-      );
-    chmodIfExists(opts.file);
-    let raw: T[];
-    try {
-      raw = JSON.parse(readFileSync(opts.file, 'utf8')) as T[];
-    } catch (e) {
-      return die(`bad ${opts.file}: ${errMsg(e)}`);
-    }
-    if (!Array.isArray(raw) || raw.length === 0)
-      die(`${opts.file} must be a non-empty array`);
-    opts.validate(raw, die);
-    const selected = allowlist.size
-      ? raw.filter((a) => allowlist.has(a.id))
-      : raw;
-    if (selected.length === 0) {
-      die(
-        `no accounts match ${opts.allowlistEnv[0]} (${[...allowlist].join(', ')})`,
-      );
-    }
-    return selected;
-  }
-
-  return { die, loadAccounts };
-}
-
-export function resolveAccountId(
-  accounts: Map<string, unknown>,
-  args: { account?: string; line?: string },
-  parseAccountId: (line: string) => string | undefined,
-): string {
-  let id = args.account;
-  id ??= args.line ? parseAccountId(args.line) : undefined;
-  id ??= (accounts.size === 1 ? [...accounts.keys()][0] : 'default') ?? 'default';
-  if (!accounts.has(id))
-    throw new Error(
-      `unknown account '${id}' (have: ${[...accounts.keys()].join(', ')})`,
-    );
-  return id;
-}

package/runtime/node_modules/@metro-labs/mcp/src/stations/messaging-normalize.ts

@@ -1,88 +0,0 @@
-type Args = Record<string, unknown>;
-export interface Normalized {
-  action: string;
-  args: Args;
-}
-
-interface Attachment {
-  kind?: string;
-  path?: string;
-  url?: string;
-  data?: string;
-  mime?: string;
-  name?: string;
-}
-
-interface DiscordFile {
-  file: string;
-  kind: string;
-  name: string;
-}
-
-const discordFile = (a: Attachment): DiscordFile | null => {
-  const file = a.path ?? a.url;
-  if (typeof file !== 'string') return null;
-  return { file, kind: a.kind ?? 'file', name: a.name ?? '' };
-};
-
-function discordAttachments(att: Attachment[]): Args {
-  const usable = att
-    .map(discordFile)
-    .filter((f): f is DiscordFile => f !== null);
-  if (!usable.length) return {};
-  return {
-    files: usable.map((f) => f.file),
-    attachmentKinds: usable.map((f) => f.kind),
-    attachmentNames: usable.map((f) => f.name),
-  };
-}
-
-export function normalizeDiscord(action: string, env: Args): Normalized {
-  const att = (env.attachments as Attachment[] | undefined) ?? [];
-  if (action === 'send') {
-    return { action: 'send', args: { ...env, ...discordAttachments(att) } };
-  }
-  if (action === 'reply') {
-    const replyTo = env.replyTo ?? env.messageId;
-    return {
-      action: 'send',
-      args: { ...env, replyTo, ...discordAttachments(att) },
-    };
-  }
-  if (action === 'unreact')
-    return { action: 'react', args: { ...env, emoji: '' } };
-  if (action === 'read') {
-    return {
-      action: 'fetch',
-      args: { line: env.line, limit: env.limit, before: env.before },
-    };
-  }
-  return { action, args: env };
-}
-
-export function normalizeTelegram(action: string, env: Args): Normalized {
-  if (action === 'reply') {
-    return {
-      action: 'send',
-      args: {
-        line: env.line,
-        text: env.text,
-        replyTo: env.replyTo,
-        attachments: env.attachments,
-      },
-    };
-  }
-  if (action === 'unreact')
-    return { action: 'react', args: { ...env, emoji: '' } };
-  return { action, args: env };
-}
-
-export function normalizeXmtp(action: string, env: Args): Normalized {
-  if (action === 'unreact') {
-    return { action: 'react', args: { ...env, action: 'removed' } };
-  }
-  if (action === 'read') {
-    return { action: 'query', args: { line: env.line, limit: env.limit } };
-  }
-  return { action, args: env };
-}

package/runtime/node_modules/@metro-labs/telegram/src/normalize.ts

@@ -1,22 +0,0 @@
-import type { Normalized } from '@metro-labs/mcp/stations/messaging-normalize';
-
-type Args = Record<string, unknown>;
-
-export function normalizeTelegramUser(action: string, env: Args): Normalized {
-  if (action === 'reply') {
-    return {
-      action: 'send',
-      args: {
-        line: env.line,
-        text: env.text,
-        replyTo: env.replyTo,
-        account: env.account,
-        attachments: env.attachments,
-      },
-    };
-  }
-  if (action === 'unreact') {
-    return { action: 'react', args: { ...env, emoji: '' } };
-  }
-  return { action, args: env };
-}

package/runtime/node_modules/@metro-labs/telegram/src/wire.ts

@@ -1 +0,0 @@
-export { emit, mintId } from '@metro-labs/mcp/stations/station-runtime';

package/runtime/node_modules/@metro-labs/telegram-bot/src/wire.ts

@@ -1,3 +0,0 @@
-export { emit, respond, mintId } from '@metro-labs/mcp/stations/station-runtime';
-
-export const SELF_URI = process.env.METRO_SELF_URI ?? '';

package/runtime/node_modules/@metro-labs/whatsapp/src/normalize.ts

@@ -1,22 +0,0 @@
-import type { Normalized } from '@metro-labs/mcp/stations/messaging-normalize';
-
-type Args = Record<string, unknown>;
-
-export function normalizeWhatsApp(action: string, env: Args): Normalized {
-  if (action === 'reply') {
-    return {
-      action: 'send',
-      args: {
-        line: env.line,
-        text: env.text,
-        replyTo: env.replyTo ?? env.messageId,
-        account: env.account,
-        attachments: env.attachments,
-      },
-    };
-  }
-  if (action === 'unreact') {
-    return { action: 'react', args: { ...env, emoji: '' } };
-  }
-  return { action, args: env };
-}

package/runtime/node_modules/@metro-labs/whatsapp/src/wire.ts

@@ -1,5 +0,0 @@
-export { emit, mintId } from '@metro-labs/mcp/stations/station-runtime';
-
-export const SELF_URI =
-  process.env.METRO_SELF_URI ??
-  'metro://claude/user/8a1857f3-4039-4da6-a4e1-611b432d2082';

package/runtime/node_modules/@metro-labs/xmtp/src/actions-push.ts

@@ -1,87 +0,0 @@
-import { accounts } from './accounts.js';
-import { respond } from './wire.js';
-import {
-  fcmPushToAll,
-  loadPushTokens,
-  removePushToken,
-  savePushTokens,
-  storePushToken,
-} from './push.js';
-
-type Args = Record<string, unknown>;
-type Handler = (id: string, args: Args) => Promise<void>;
-
-function registerPush(id: string, args: Args): Promise<void> {
-  const { token, account, platform, inboxId } = args as {
-    token?: string;
-    account?: string;
-    platform?: string;
-    inboxId?: string;
-  };
-  if (!token || typeof token !== 'string' || token.length < 20) {
-    throw new Error('register-push requires a non-empty FCM device token');
-  }
-  const total = storePushToken({ token, account, platform, inboxId });
-  respond(id, { result: { stored: true, total, account: account ?? null } });
-  return Promise.resolve();
-}
-
-function listPush(id: string): Promise<void> {
-  const tokens = loadPushTokens();
-  respond(id, {
-    result: {
-      count: tokens.length,
-      tokens: tokens.map((t) => ({
-        token: `${t.token.slice(0, 12)}…${t.token.slice(-6)}`,
-        registeredAt: t.registeredAt,
-        lastSeenAt: t.lastSeenAt ?? null,
-        account: t.account ?? null,
-        platform: t.platform ?? null,
-        inboxId: t.inboxId ?? null,
-      })),
-    },
-  });
-  return Promise.resolve();
-}
-
-async function testPush(id: string, args: Args): Promise<void> {
-  const { account } = args as { account?: string };
-  const acctId =
-    account ??
-    (accounts.size === 1 ? [...accounts.keys()][0] : 'default') ??
-    'default';
-  await fcmPushToAll(acctId, { channelId: 'xmtp', source: 'test-push' });
-  const sent = loadPushTokens().filter(
-    (t) => !t.account || t.account === acctId,
-  ).length;
-  respond(id, { result: { sent, account: acctId } });
-}
-
-function unregisterPush(id: string, args: Args): Promise<void> {
-  const { token } = args as { token: string };
-  savePushTokens(loadPushTokens().filter((t) => t.token !== token));
-  respond(id, { result: { removed: true } });
-  return Promise.resolve();
-}
-
-function disablePush(id: string, args: Args): Promise<void> {
-  const { token } = args as { token?: string };
-  if (!token || typeof token !== 'string')
-    throw new Error('disable-push requires a token');
-  const remaining = removePushToken(token);
-  respond(id, {
-    result: {
-      removed: remaining !== -1,
-      remaining: remaining === -1 ? null : remaining,
-    },
-  });
-  return Promise.resolve();
-}
-
-export const pushHandlers: Record<string, Handler> = {
-  'register-push': registerPush,
-  'list-push': (id) => listPush(id),
-  'test-push': testPush,
-  'unregister-push': unregisterPush,
-  'disable-push': disablePush,
-};

package/runtime/node_modules/@metro-labs/xmtp/src/emit-core.ts

@@ -1,55 +0,0 @@
-import { accounts } from './accounts.js';
-import { emit, mintId, SELF_URI } from './wire.js';
-
-export function emitInbound(
-  accountId: string,
-  e: Record<string, unknown>,
-): void {
-  const acct = accounts.get(accountId);
-  const owner = acct?.cfg.owner;
-  const payload = {
-    ...(e.payload as Record<string, unknown> | undefined),
-    account: accountId,
-  };
-  emit({
-    kind: 'inbound',
-    ...e,
-    ...(owner ? { to: owner } : {}),
-    account: accountId,
-    payload,
-  });
-}
-
-export function emitAttachmentSaved(
-  accountId: string,
-  line: string,
-  sourceMsgId: string,
-  index: number,
-  save: Promise<{ path: string; mime?: string; name?: string }>,
-): void {
-  void save
-    .then((saved) => {
-      emitInbound(accountId, {
-        id: mintId(),
-        ts: new Date().toISOString(),
-        station: 'xmtp',
-        line,
-        from: SELF_URI,
-        text: `📎 saved: ${saved.path}`,
-        payload: {
-          contentType: 'attachmentSaved',
-          attachmentFor: sourceMsgId,
-          index,
-          attachmentPath: saved.path,
-          localPath: saved.path,
-          mime: saved.mime,
-          name: saved.name,
-        },
-      });
-    })
-    .catch((err: unknown) =>
-      process.stderr.write(
-        `xmtp attachment save failed: ${err instanceof Error ? err.message : String(err)}\n`,
-      ),
-    );
-}