@stage-labs/metro 0.1.0-beta.325 → 0.1.0-beta.327

package/runtime/node_modules/@metro-labs/daemon/src/agent-user/schedules.ts

@@ -1,6 +1,7 @@
 import { spawnSync } from 'node:child_process';
 import { createHash } from 'node:crypto';
 import { isRecord } from '@metro-labs/core/is-record';
+import { stringOf } from '@metro-labs/http/api-http';
 import type { AgentUser } from './user.js';
 import { helperRun, type RunResult } from './unit-files.js';
 
@@ -64,22 +65,21 @@ function listTimers(runner: Runner): Record<string, unknown>[] {
   }
 }
 
-const text = (v: unknown): string => (typeof v === 'string' ? v : '');
 const orRoot = (user: string | undefined): string => (user === undefined || user === '' ? 'root' : user);
 
 function timerJob(runner: Runner, t: Record<string, unknown>): ScheduledJob | null {
-  const unit = text(t.unit);
-  const service = text(t.activates);
+  const unit = stringOf(t.unit);
+  const service = stringOf(t.activates);
   if (unit === '' || service === '' || OWN_UNITS.test(service)) return null;
   const timer = showProps(runner, unit, ['FragmentPath', 'TimersCalendar', 'TimersMonotonic']);
-  if (!text(timer.FragmentPath).startsWith(`${UNIT_DIR}/`)) return null;
+  if (!stringOf(timer.FragmentPath).startsWith(`${UNIT_DIR}/`)) return null;
   const svc = showProps(runner, service, ['ExecStart', 'User', 'Result']);
-  const command = execArgv(text(svc.ExecStart)).join(' ');
+  const command = execArgv(stringOf(svc.ExecStart)).join(' ');
   return {
     id: `timer:${unit}`,
     kind: 'timer',
     name: unit.replace(/\.timer$/, ''),
-    schedule: calendarOf(`${text(timer.TimersCalendar)} ${text(timer.TimersMonotonic)}`),
+    schedule: calendarOf(`${stringOf(timer.TimersCalendar)} ${stringOf(timer.TimersMonotonic)}`),
     command,
     runsAs: orRoot(svc.User),
     next: stamp(t.next),

package/runtime/node_modules/@metro-labs/daemon/src/agent-user/user.ts

@@ -1,6 +1,4 @@
 import { spawnSync } from 'node:child_process';
-import { existsSync } from 'node:fs';
-import { homedir } from 'node:os';
 import { join } from 'node:path';
 import { runningAsMetro } from '../metro-user/privilege.js';
 
@@ -74,28 +72,6 @@ export const agentCommand = (command: readonly string[], extra: Record<string, s
   return [bin, ...argv];
 };
 
-const SDK_PACKAGE = '@anthropic-ai/claude-agent-sdk';
-
-export const CLAUDE_ENV: Readonly<Record<string, string>> = { DISABLE_AUTOUPDATER: '1' };
-
-let musl: boolean | null = null;
-
-function muslFirst(): boolean {
-  if (process.platform !== 'linux') return false;
-  if (musl === null) {
-    const report = process.report.getReport() as { header?: { glibcVersionRuntime?: string } };
-    musl = report.header?.glibcVersionRuntime === undefined;
-  }
-  return musl;
-}
-
-export function claudeBin(user = agentUser()): string {
-  const name = `${SDK_PACKAGE}-${process.platform}-${process.arch}`;
-  const packages = muslFirst() ? [`${name}-musl`, name] : [name, `${name}-musl`];
-  const [first = '', other = ''] = packages.map((pkg) => join(user?.home ?? homedir(), '.metro', 'sdk-runner', 'node_modules', pkg, 'claude'));
-  return existsSync(first) || !existsSync(other) ? first : other;
-}
-
 export const claudeHome = (user = agentUser()): string | null => (user === null ? null : user.home);
 
 export const agentViewDir = (user: AgentUser): string => join(user.home, '.metro', 'agents');

package/runtime/node_modules/@metro-labs/daemon/src/agent-user/view.ts

@@ -1,4 +1,4 @@
-import { existsSync, readFileSync } from 'node:fs';
+import { readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { errMsg, log } from '@metro-labs/core/log';
 import { isRecord } from '@metro-labs/core/is-record';
@@ -45,7 +45,7 @@ export function viewFiles(dir = agentsDir(), model: () => string | null = () =>
     ['agent.json', agentFile(dir)],
     ['model.json', model()],
   ]);
-  for (const name of COPIED) files.set(name, existsSync(join(dir, name)) ? readText(join(dir, name)) : null);
+  for (const name of COPIED) files.set(name, readText(join(dir, name)));
   for (const name of NEVER_COPIED) files.set(name, null);
   return files;
 }
@@ -58,7 +58,7 @@ export function syncAgentView(user: AgentUser | null = agentUser(), dir = agents
   let changed = 0;
   for (const [name, text] of viewFiles(dir)) {
     const path = join(target, name);
-    if (written.has(path) && written.get(path) === text) continue;
+    if (written.get(path) === text) continue;
     if (text === null) removeHome(path, false, user);
     else writeHomeText(path, text, 0o600, undefined, user);
     written.set(path, text);

package/runtime/node_modules/@metro-labs/daemon/src/agents/bundle.ts

@@ -6,13 +6,12 @@ import { ApiError } from '@metro-labs/http/api-error';
 import { isRecord } from '@metro-labs/core/is-record';
 import { parseId } from '@metro-labs/core/ids';
 import type { LoadedAccount, LoadedAgent } from '../stations/materialize.js';
-import { STATIONS } from '@metro-labs/core/station-names';
 import { approversOf } from './files.js';
+import { isStationName } from './account-attach.js';
 
 const AGENTS = '/api/agents';
 const RESTORE_PATH = `${AGENTS}/restore`;
 const BUNDLE_MAX = 2 * 1024 * 1024;
-const STATION_NAMES = new Set<string>(STATIONS);
 
 export interface AgentBundle {
   version: 1;
@@ -50,7 +49,7 @@ function parseMode(raw: unknown): ImportMode {
 const bad = (what: string): ApiError => new ApiError(`bundle: ${what}`, 400);
 
 function stationOf(raw: unknown): LoadedAccount {
-  if (!isRecord(raw) || typeof raw.station !== 'string' || !STATION_NAMES.has(raw.station))
+  if (!isRecord(raw) || !isStationName(raw.station))
     throw bad('a station is not a known station');
   if (typeof raw.id !== 'string' || !isRecord(raw.config)) throw bad('a station has no id or config');
   const allowlist = Array.isArray(raw.allowlist)
@@ -58,7 +57,7 @@ function stationOf(raw: unknown): LoadedAccount {
     : null;
   const policy = parsePolicy(raw.policy, `bundle ${raw.station}/${raw.id}`);
   return {
-    station: raw.station as LoadedAccount['station'],
+    station: raw.station,
     id: raw.id,
     allowlist,
     ...approversOf(raw.approvers),

package/runtime/node_modules/@metro-labs/daemon/src/agents/file-admin.ts

@@ -33,8 +33,6 @@ interface Stored {
   file: AgentFile;
 }
 
-const missing = (): AgentAdminError => new AgentAdminError('no such agent', 404);
-
 function parseOwner(raw: string): string | null {
   const text = raw.trim();
   return isOrganizationId(text) ? text : null;
@@ -66,7 +64,7 @@ function save(stored: Stored): void {
 
 function agentOrThrow(id: string, dir: string): Stored {
   const found = storedAgents(dir).find((s) => s.file.id === id);
-  if (found === undefined) throw missing();
+  if (found === undefined) throw new AgentAdminError('no such agent', 404);
   return found;
 }
 
@@ -84,9 +82,8 @@ function freshId(taken: Set<string>): string {
 
 export async function localCreateAgent(rawName?: string, dir = agentsDir()): Promise<CreatedAgent> {
   const name = rawName === undefined ? null : normalizeAgentName(rawName);
-  const existing = storedAgents(dir);
-  if (existing.length > 0) throw new AgentAdminError('this box already has its agent', 409);
-  const id = freshId(new Set());
+  if (storedAgents(dir).length > 0) throw new AgentAdminError('this box already has its agent', 409);
+  const id = newId();
   const key = newApiKey();
   ensureSecureDir(dir);
   save({
@@ -228,9 +225,7 @@ export function localPairAgain(agentId: string, station: StationName, accountId:
 }
 
 export function readLocalAgentFile(agentId: string, dir = agentsDir()): AgentFile {
-  const found = storedAgents(dir).find((s) => s.file.id === agentId);
-  if (found === undefined) throw missing();
-  return found.file;
+  return agentOrThrow(agentId, dir).file;
 }
 
 const UNIQUE_CREDENTIALS: Record<string, string> = {

package/runtime/node_modules/@metro-labs/daemon/src/agents/files.ts

@@ -2,15 +2,14 @@ import { existsSync, readFileSync } from 'node:fs';
 import { homedir } from 'node:os';
 import { join } from 'node:path';
 import { AGENT_NAME_RE, ID_RE } from '@metro-labs/core/ids';
-import { STATIONS, type StationName } from '@metro-labs/core/station-names';
 import type { LoadedAccount, LoadedAgent, StationSource } from '../stations/materialize.js';
 import { isRecord } from '@metro-labs/core/is-record';
 import { parsePolicy } from '../policy/policy.js';
+import { isStationName } from './account-attach.js';
 
 const AGENT_FILE = 'agent.json';
 
 const KEY_RE = /^[A-Za-z0-9_-]{16,128}$/;
-const STATION_NAMES = new Set<string>(STATIONS);
 
 export class AgentFileError extends Error {}
 
@@ -35,10 +34,6 @@ function fail(path: string, reason: string): never {
   throw new AgentFileError(`${path}: ${reason}`);
 }
 
-function isStationName(value: unknown): value is StationName {
-  return typeof value === 'string' && STATION_NAMES.has(value);
-}
-
 function allowlistOf(raw: unknown, path: string, where: string): string[] | null {
   if (raw === null || raw === undefined) return null;
   if (!Array.isArray(raw)) fail(path, `${where}.allowlist is not a list of strings`);

package/runtime/node_modules/@metro-labs/daemon/src/channels/inbound.ts

@@ -11,7 +11,7 @@ import { isMetroNotice } from './notice.js';
 import { replyMeta } from './addressed.js';
 import { reactContent, reactionEmoji } from './react-note.js';
 import {
-  capSet,
+  capSize,
   displayNameMeta,
   missingAttachmentNames,
   senderMeta,
@@ -76,7 +76,7 @@ export class InboundRelay {
   noteSent(messageId: string): void {
     if (!messageId) return;
     this.sentIds.add(messageId);
-    capSet(this.sentIds, SENT_IDS_MAX);
+    capSize(this.sentIds, SENT_IDS_MAX);
   }
 
   private notify(method: string, params: Record<string, unknown>): Promise<void> {
@@ -283,7 +283,7 @@ export class InboundRelay {
     }
     if (!base.line) return;
     this.allowedLines.add(base.line);
-    capSet(this.allowedLines, ALLOWED_LINES_MAX);
+    capSize(this.allowedLines, ALLOWED_LINES_MAX);
   }
 
   private droppedSender(ev: Record<string, unknown>, from: string, line: string): boolean {

package/runtime/node_modules/@metro-labs/daemon/src/channels/pending.ts

@@ -36,9 +36,9 @@ export interface MediaCtx {
   callMeta?: () => Record<string, string>;
 }
 
-export function capSet(set: Set<string>, max: number): void {
+export function capSize(set: Set<string> | Map<string, unknown>, max: number): void {
   while (set.size > max) {
-    const oldest = set.values().next();
+    const oldest = set.keys().next();
     if (oldest.done) break;
     set.delete(oldest.value);
   }

package/runtime/node_modules/@metro-labs/daemon/src/claude/files.ts

@@ -152,7 +152,7 @@ function sessionOf(path: string, id: string, mtime: number, size: number): Claud
   return {
     id,
     title: (titled === undefined ? null : str(titled.aiTitle)) ?? firstPrompt(head) ?? 'Untitled session',
-    startedAt: str(head.find((l) => str(l.timestamp) !== null)?.timestamp) ?? null,
+    startedAt: str(head.find((l) => str(l.timestamp) !== null)?.timestamp),
     lastAt: new Date(mtime).toISOString(),
     bytes: size,
     gitBranch: str(meta.gitBranch),

package/runtime/node_modules/@metro-labs/daemon/src/claude/github-fetch.ts

@@ -142,7 +142,7 @@ function immutableCommit(data: unknown): { sha: string; tree: string } {
 
 function regularFile(entry: Entry): void {
   if (entry.type !== 'blob' || !['100644', '100755'].includes(entry.mode)) throw new GitHubFailure('Symlinks, submodules and special files are not supported in skills.');
-  if (!skillPath(entry.path) || entry.size < 0 || entry.size > SKILL_FILE_MAX || !Number.isInteger(entry.size)) throw new GitHubFailure('A skills path or file size is not supported. Use skill-name/SKILL.md and regular resources, up to 256 KiB each.');
+  if (!skillPath(entry.path) || entry.size < 0 || entry.size > SKILL_FILE_MAX || !Number.isInteger(entry.size)) throw new GitHubFailure(`A skills path or file size is not supported. Use skill-name/SKILL.md and regular resources, up to ${SKILL_FILE_MAX / 1024} KiB each.`);
 }
 
 function checkedEntries(entries: Entry[]): Entry[] {
@@ -154,7 +154,7 @@ function checkedEntries(entries: Entry[]): Entry[] {
     total += entry.size;
     files.push(entry);
   }
-  if (files.length > SKILL_FILES_MAX || total > SKILL_TOTAL_MAX) throw new GitHubFailure('Skills exceed 256 files or 8 MiB.');
+  if (files.length > SKILL_FILES_MAX || total > SKILL_TOTAL_MAX) throw new GitHubFailure(`Skills exceed ${SKILL_FILES_MAX} files or ${SKILL_TOTAL_MAX / 1024 / 1024} MiB.`);
   if (new Set(files.map((entry) => entry.path.toLowerCase())).size !== files.length) throw new GitHubFailure('Skills contain duplicate file paths.');
   return files;
 }

package/runtime/node_modules/@metro-labs/daemon/src/claude/github-skills.ts

@@ -4,7 +4,7 @@ import { Readable } from 'node:stream';
 import { log } from '@metro-labs/core/log';
 import { isRecord } from '@metro-labs/core/is-record';
 import { writeSecure } from '@metro-labs/core/secure-fs';
-import { SKILL_HASH, SKILL_MANIFEST_MAX, skillGeneration, skillRelease, skillSourceRoot, type SkillGeneration } from '@metro-labs/core/skill-source';
+import { SKILL_FILE_MAX, SKILL_HASH, SKILL_MANIFEST_MAX, skillGeneration, skillRelease, skillSourceRoot, type SkillGeneration } from '@metro-labs/core/skill-source';
 import { ApiError } from '@metro-labs/http/api-error';
 import { readFileSync, statSync } from '../agent-user/agent-fs.js';
 import { receiveHomeFile, writeHomeText } from '../agent-user/home-fs.js';
@@ -135,7 +135,7 @@ export class GitHubSkills {
   read(id: string): ClaudeSkill & { text: string } {
     const row = this.rows().find((skill) => skill.id === id);
     if (row === undefined) throw new ApiError('no such skill', 404);
-    if (statSync(row.path).size > 256 * 1024) throw new ApiError('The managed skill changed on disk. Sync it again.', 409);
+    if (statSync(row.path).size > SKILL_FILE_MAX) throw new ApiError('The managed skill changed on disk. Sync it again.', 409);
     return { ...row, text: readFileSync(row.path, 'utf8') };
   }
 

package/runtime/node_modules/@metro-labs/daemon/src/claude/skills.ts

@@ -104,7 +104,7 @@ const skillTemplate = (name: string): string =>
   ['---', `name: ${name}`, 'description: what this skill does, and when Claude should reach for it', '---', '', `# ${name}`, '', 'Write the instructions here.', ''].join('\n');
 
 export function createClaudeSkill(name: string, text: string | undefined, dir = claudeDir()): ClaudeSkill {
-  if (typeof name !== 'string' || !SKILL_NAME_RE.test(name))
+  if (!SKILL_NAME_RE.test(name))
     throw new ApiError('a skill name is lowercase letters, digits and dashes, up to 64 characters', 400);
   const path = join(userSkillsRoot(dir), name, FILE);
   if (existsSync(path)) throw new ApiError('a skill by that name already lives there', 409);

package/runtime/node_modules/@metro-labs/daemon/src/files/attach-grant.ts

@@ -1,5 +1,6 @@
 import { randomBytes, timingSafeEqual } from 'node:crypto';
 import { ID_RE } from '@metro-labs/core/ids';
+import { isRecord } from '@metro-labs/core/is-record';
 import { readFileSync } from 'node:fs';
 import { resolveCachedAttachment } from '@metro-labs/core/stations/attachments';
 import { writeSecure } from '@metro-labs/core/secure-fs';
@@ -23,8 +24,8 @@ function parseGrant(raw: string): AttachmentGrant | undefined {
   } catch {
     return undefined;
   }
-  if (typeof parsed !== 'object' || parsed === null) return undefined;
-  const { token, agentId, mintedAt } = parsed as Record<string, unknown>;
+  if (!isRecord(parsed)) return undefined;
+  const { token, agentId, mintedAt } = parsed;
   if (typeof token !== 'string' || token === '') return undefined;
   if (typeof agentId !== 'string' || !ID_RE.test(agentId)) return undefined;
   return {

package/runtime/node_modules/@metro-labs/daemon/src/files/attach-serve.ts

@@ -40,7 +40,7 @@ export function attachmentUrl(
   pathOrName: string,
   agentId: string,
 ): string | null {
-  const base = publicBaseUrl() ?? loopbackBase();
+  const base = publicBaseOrDefault();
   if (!base) return null;
   const name = pathOrName.split('/').pop();
   if (!name || !resolveCachedAttachment(name)) return null;

package/runtime/node_modules/@metro-labs/daemon/src/files/upload-api.ts

@@ -37,11 +37,8 @@ const VAGUE_MIMES = new Set([
 
 const mib = (n: number): string => `${Math.round(n / (1024 * 1024))} MiB`;
 
-const uploadLimit = (): string =>
-  `${mib(MAX_UPLOAD_BYTES)} (${MAX_UPLOAD_BYTES} bytes)`;
-
 const tooLarge = (): string =>
-  `upload exceeds the ${uploadLimit()} per-file limit; ` +
+  `upload exceeds the ${mib(MAX_UPLOAD_BYTES)} (${MAX_UPLOAD_BYTES} bytes) per-file limit; ` +
   'send a link in `text` for anything larger';
 
 const noRoom = (): string =>
@@ -96,9 +93,8 @@ function declaredLength(req: IncomingMessage): number | undefined {
 
 function assertRoomForDeclared(req: IncomingMessage, room: number): void {
   const declared = declaredLength(req);
-  if (declared === undefined) return;
-  if (declared > MAX_UPLOAD_BYTES) throw new ApiError(tooLarge(), 413);
-  if (declared > room) throw new ApiError(noRoom(), 507);
+  const over = declared === undefined ? undefined : overflowAt(declared, room);
+  if (over !== undefined) throw over;
 }
 
 async function drainInto(

package/runtime/node_modules/@metro-labs/daemon/src/mcp/accounts.ts

@@ -7,6 +7,7 @@ import {
 import { listEndpoints } from '../stations/webhook-endpoints.js';
 import { hookUrl, threemaCallbackUrl } from '../stations/attach.js';
 import { accountStatusOf } from '@metro-labs/core/stations/account-status';
+import { isRecord } from '@metro-labs/core/is-record';
 import { accountEnabled, agentIdForAccount, allowlistForAccount, approversForAccount, knownAccounts, type KnownAccount } from '../agents/map.js';
 
 const accountId = (acc: unknown): string | undefined => {
@@ -14,16 +15,9 @@ const accountId = (acc: unknown): string | undefined => {
   return typeof id === 'string' ? id : undefined;
 };
 
-const asRecord = (acc: unknown): Record<string, unknown> | undefined =>
-  typeof acc === 'object' && acc !== null && !Array.isArray(acc)
-    ? (acc as Record<string, unknown>)
-    : undefined;
-
 function withAgentId(station: string, acc: unknown): unknown {
-  const rec = asRecord(acc);
-  if (rec === undefined) return acc;
-  const id = typeof rec.id === 'string' ? rec.id : undefined;
-  if (id === undefined) return acc;
+  if (!isRecord(acc) || typeof acc.id !== 'string') return acc;
+  const id = acc.id;
   const agentId = agentIdForAccount(station, id);
   if (agentId === undefined) return acc;
   const allowlist = allowlistForAccount(station, id);
@@ -31,7 +25,7 @@ function withAgentId(station: string, acc: unknown): unknown {
   const policy = stored === undefined ? {} : { policy: stored };
   const approvers = approversForAccount(station, id);
   const extra = approvers.length === 0 ? policy : { ...policy, approvers };
-  const tagged = allowlist === undefined ? { ...rec, agentId, ...extra } : { ...rec, agentId, allowlist, ...extra };
+  const tagged = allowlist === undefined ? { ...acc, agentId, ...extra } : { ...acc, agentId, allowlist, ...extra };
   return accountEnabled(station, id) ? tagged : { ...tagged, enabled: false };
 }
 
@@ -79,17 +73,15 @@ function inCoreAccounts(station: string): unknown[] {
 }
 
 function withCallbackUrl(acc: unknown): unknown {
-  const rec = asRecord(acc);
-  if (rec === undefined) return acc;
-  const { callbackId, callbackToken, ...rest } = rec;
+  if (!isRecord(acc)) return acc;
+  const { callbackId, callbackToken, ...rest } = acc;
   if (typeof callbackId !== 'string' || typeof callbackToken !== 'string') return rest;
   return { ...rest, callback: threemaCallbackUrl(callbackId, callbackToken) };
 }
 
 function withStatus(reports: boolean, acc: unknown): unknown {
-  const rec = asRecord(acc);
-  if (rec === undefined || !('status' in rec)) return acc;
-  const { status, ...rest } = rec;
+  if (!isRecord(acc) || !('status' in acc)) return acc;
+  const { status, ...rest } = acc;
   const live = reports ? accountStatusOf(status) : null;
   return live === null ? rest : { ...rest, status: live };
 }
@@ -168,9 +160,8 @@ async function loadStations(): Promise<ScopedAccounts> {
 const URL_SECRETS = new Set(['endpoint', 'callback']);
 
 function withoutUrlSecrets(acc: unknown): unknown {
-  const rec = asRecord(acc);
-  if (rec === undefined) return acc;
-  return Object.fromEntries(Object.entries(rec).filter(([key]) => !URL_SECRETS.has(key)));
+  if (!isRecord(acc)) return acc;
+  return Object.fromEntries(Object.entries(acc).filter(([key]) => !URL_SECRETS.has(key)));
 }
 
 export async function gatherAccounts(

package/runtime/node_modules/@metro-labs/daemon/src/mcp/call-tools.ts

@@ -139,10 +139,6 @@ function refusal(m: MessageArgs, text: string | undefined, requested: CanonicalA
   return undefined;
 }
 
-function noteSent(m: MessageArgs, messageId: string | undefined): void {
-  if (messageId !== undefined) m.onSent?.(messageId);
-}
-
 async function handleSend(m: MessageArgs): Promise<ToolResult> {
   if (m.a.speech !== undefined) return sendSpeech(m.line, m.a);
   const text = m.a.text as string | undefined;
@@ -161,7 +157,7 @@ async function handleSend(m: MessageArgs): Promise<ToolResult> {
       ? await sendNative(m, text, replyTo, atts)
       : await sendForwarded(m, text, replyTo, atts);
     if (!sent.labels.length) return errResult(NOTHING_TO_SEND);
-    noteSent(m, sent.messageId);
+    if (sent.messageId !== undefined) m.onSent?.(sent.messageId);
     const done = withId(`sent: ${sent.labels.join(', ')}`, sent.messageId);
     return ok(sent.thread === undefined ? done : `${done} — new thread line: ${sent.thread}`);
   } finally {

package/runtime/node_modules/@metro-labs/daemon/src/mcp/event-store.ts

@@ -5,6 +5,7 @@ import type {
 } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
 import type { JSONRPCMessage } from '@modelcontextprotocol/sdk/types.js';
 import { str } from '@metro-labs/core/str';
+import { isRecord } from '@metro-labs/core/is-record';
 import { eventInScope } from '../agents/scope.js';
 import { CALL_NOTICE, CALL_STATE } from '@metro-labs/core/call';
 
@@ -28,10 +29,8 @@ const SEP = '_';
 
 function frameLine(message: JSONRPCMessage): string | undefined {
   const params: unknown = (message as { params?: unknown }).params;
-  if (typeof params !== 'object' || params === null) return undefined;
-  const meta: unknown = (params as { meta?: unknown }).meta;
-  if (typeof meta !== 'object' || meta === null) return undefined;
-  return str((meta as { line?: unknown }).line) || undefined;
+  if (!isRecord(params) || !isRecord(params.meta)) return undefined;
+  return str(params.meta.line) || undefined;
 }
 
 const isCallNotice = (message: JSONRPCMessage): boolean => 'method' in message && (message.method === CALL_NOTICE || message.method === CALL_STATE);

package/runtime/node_modules/@metro-labs/daemon/src/mcp/group-tools.ts

@@ -65,9 +65,8 @@ function forwardArgs(a: Record<string, unknown>): Record<string, unknown> {
   const args: Record<string, unknown> = {};
   const members = strList(a.members);
   if (members.length) args.members = members;
-  for (const key of ['name', 'account', 'parent', 'addresses', 'inboxIds'])
+  for (const key of ['name', 'account', 'parent', 'addresses', 'inboxIds', 'private'])
     if (a[key] !== undefined) args[key] = a[key];
-  if (a.private !== undefined) args.private = a.private;
   return args;
 }
 

package/runtime/node_modules/@metro-labs/daemon/src/mcp/index.ts

@@ -15,6 +15,7 @@ import {
   serveChannelGet,
 } from './raw-get-stream.js';
 import { errMsg } from '@metro-labs/core/log';
+import { isRecord } from '@metro-labs/core/is-record';
 import { channelLog, type McpSession } from './session.js';
 import { SessionSlot } from './session-slot.js';
 import { connectCallBridge } from './call-bridge.js';
@@ -22,10 +23,7 @@ import { connectServerApprovals } from './server-approvals.js';
 import { handleIncomingDiagnostic } from './diagnostics.js';
 import { onConnectorToolsChanged } from '../mcp-server/connector-tools.js';
 
-const isInitialize = (b: unknown): boolean =>
-  !!b &&
-  typeof b === 'object' &&
-  (b as { method?: string }).method === 'initialize';
+const isInitialize = (b: unknown): boolean => isRecord(b) && b.method === 'initialize';
 
 const MCP_BODY_MAX = 32 * 1024 * 1024;
 

package/runtime/node_modules/@metro-labs/daemon/src/mcp/policy-gate.ts

@@ -1,3 +1,4 @@
+import { isRecord } from '@metro-labs/core/is-record';
 import { str } from '@metro-labs/core/str';
 import type { ToolResult } from '@metro-labs/core/stations/types';
 import { accountFromLine, knownAccounts } from '../agents/map.js';
@@ -22,7 +23,7 @@ function channelTargets(name: string, a: Record<string, unknown>): ChannelTarget
   if (UNGATED.has(name)) return [];
   if (name === 'get_profile') {
     const line = profileScopeLine(a);
-    return line === undefined ? [] : fromLine(line, undefined);
+    return line === undefined ? [] : fromLine(line);
   }
   const account = str(a.account);
   if (name === 'list_channels') return accountTargets(name, { account });
@@ -79,10 +80,8 @@ function effectivePolicy(target: ChannelTarget): EffectivePolicy {
 export function withEffectivePolicy(byStation: Record<string, unknown[]>): Record<string, unknown[]> {
   const out: Record<string, unknown[]> = {};
   for (const [station, rows] of Object.entries(byStation))
-    out[station] = rows.map((row) => {
-      if (typeof row !== 'object' || row === null || Array.isArray(row)) return row;
-      const id = (row as { id?: unknown }).id;
-      return typeof id === 'string' ? { ...row, policy: effectivePolicy({ kind: 'channel', station, account: id }) } : row;
-    });
+    out[station] = rows.map((row) =>
+      isRecord(row) && typeof row.id === 'string' ? { ...row, policy: effectivePolicy({ kind: 'channel', station, account: row.id }) } : row,
+    );
   return out;
 }

package/runtime/node_modules/@metro-labs/daemon/src/mcp/server-approvals.ts

@@ -4,6 +4,7 @@ import type { McpApproval, McpDecision } from '@metro-labs/http/mcp-server-proto
 import { holdPrompt, isPromptHeld, type Behavior } from '../approvals/pending.js';
 import { ownerLine } from '../approvals/owner-line.js';
 import { metroNotice } from '../channels/notice.js';
+import { capSize } from '../channels/pending.js';
 import { announcedLine, noteAnnounced } from '../mcp-server/announced.js';
 import type { AnswerOutcome } from '../mcp-server/link.js';
 import { serverPromptBody } from './permission-prompt.js';
@@ -32,11 +33,7 @@ const noticeLineFor = (line: string | undefined): string | undefined => line ??
 function remember(id: string, now = Date.now()): void {
   for (const [seen, at] of recent) if (now - at >= RECENT_MS) recent.delete(seen);
   recent.set(id, now);
-  while (recent.size > RECENT_MAX) {
-    const oldest = recent.keys().next();
-    if (oldest.done) break;
-    recent.delete(oldest.value);
-  }
+  capSize(recent, RECENT_MAX);
 }
 
 const answeredRecently = (id: string, now = Date.now()): boolean => now - (recent.get(id) ?? -Infinity) < RECENT_MS;

package/runtime/node_modules/@metro-labs/daemon/src/mcp/session.ts

@@ -197,7 +197,7 @@ export class McpSession {
     if (sink !== undefined) {
       this.lastStreamAttachedAt = new Date().toISOString();
       this.announceCallState();
-      this.announceToolSchema();
+      this.toolsChanged();
     }
   }
 
@@ -216,10 +216,6 @@ export class McpSession {
   }
 
   toolsChanged(): void {
-    this.announceToolSchema();
-  }
-
-  private announceToolSchema(): void {
     if (!this.streamAttached) return;
     this.deliverSchemaNotice(
       () => this.server.sendToolListChanged(),

package/runtime/node_modules/@metro-labs/daemon/src/mcp/tool-catalog.ts

@@ -41,21 +41,19 @@ export const declaredGroup = (name: string): ToolGroup | undefined => BY_NAME.ge
 
 export const toolGroupOf = (name: string): ToolGroup => declaredGroup(name) ?? 'write';
 
-export type ToolAnnotations = Record<string, unknown>;
-
 export interface PublishedTool {
   name: string;
   title?: string;
   description: string;
   inputSchema: Record<string, unknown>;
-  annotations: ToolAnnotations;
+  annotations: Record<string, unknown>;
   _meta?: Record<string, boolean>;
 }
 
 const ALWAYS_LOADED = new Set(['react', 'typing', 'send', 'reply']);
 const ALWAYS_LOAD = { 'anthropic/alwaysLoad': true };
 
-const annotationsOf = (def: ToolDef): ToolAnnotations =>
+const annotationsOf = (def: ToolDef): Record<string, unknown> =>
   toolGroupOf(def.name) === 'read'
     ? { readOnlyHint: true }
     : { readOnlyHint: false, destructiveHint: def.destructive === true };

package/runtime/node_modules/@metro-labs/daemon/src/mcp-server/announced.ts

@@ -37,7 +37,7 @@ function prune(now: number): void {
 
 function save(): void {
   if (file === undefined) return;
-  const announced = Object.fromEntries([...known].map(([id, entry]) => [id, { line: entry.line, at: entry.at }]));
+  const announced = Object.fromEntries(known);
   try {
     writeSecure(file, `${JSON.stringify({ version: 1, announced })}\n`);
   } catch (err) {

package/runtime/node_modules/@metro-labs/daemon/src/metro-user/helper-script.ts

@@ -16,7 +16,6 @@ export const sudoersText = (agent: string): string =>
   [
     `${METRO_USER} ALL=(${agent}) NOPASSWD: ALL`,
     `${METRO_USER} ALL=(root) NOPASSWD: ${HELPER_PATH} *`,
-    `Defaults:${METRO_USER} !requiretty`,
     '',
   ].join('\n');
 

package/runtime/node_modules/@metro-labs/daemon/src/metro-user/install.ts

@@ -14,6 +14,7 @@ import {
   upgradeUnitText,
 } from './helper-script.js';
 import { AGENT_NAME } from '../agent-user/user.js';
+import { hardenTailscale } from './tailscale-guard.js';
 
 interface InstallPaths {
   helper: string;
@@ -72,6 +73,7 @@ if (import.meta.main) {
   installRootHelper();
   installImdsGuard();
   installUpgradeUnit(node);
+  for (const note of hardenTailscale()) process.stderr.write(`metro: ${note}\n`);
   process.stdout.write(
     `metro: wrote ${HELPER_PATH}, ${SUDOERS_PATH}, ${IMDS_UNIT_PATH} and ${UPGRADE_UNIT_PATH}; only root and metro reach the instance metadata service, and the root side follows every update\n`,
   );