@wipcomputer/wip-ldm-os 0.4.73-alpha.8 → 0.4.74

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (61) hide show
  1. package/LICENSE +52 -0
  2. package/SKILL.md +8 -1
  3. package/bin/ldm.js +587 -82
  4. package/dist/bridge/chunk-3RG5ZIWI.js +10 -0
  5. package/dist/bridge/{chunk-LF7EMFBY.js → chunk-7NH6JBIO.js} +127 -49
  6. package/dist/bridge/cli.js +2 -1
  7. package/dist/bridge/core.d.ts +13 -1
  8. package/dist/bridge/core.js +4 -1
  9. package/dist/bridge/mcp-server.js +52 -7
  10. package/dist/bridge/openclaw.d.ts +5 -0
  11. package/dist/bridge/openclaw.js +11 -0
  12. package/docs/bridge/TECHNICAL.md +86 -0
  13. package/docs/doc-pipeline/README.md +74 -0
  14. package/docs/doc-pipeline/TECHNICAL.md +79 -0
  15. package/lib/deploy.mjs +175 -13
  16. package/lib/detect.mjs +20 -6
  17. package/package.json +2 -2
  18. package/shared/docs/README.md.tmpl +2 -2
  19. package/shared/docs/how-releases-work.md.tmpl +3 -1
  20. package/shared/docs/how-worktrees-work.md.tmpl +12 -7
  21. package/shared/rules/git-conventions.md +3 -3
  22. package/shared/rules/release-pipeline.md +1 -1
  23. package/shared/rules/security.md +1 -1
  24. package/shared/rules/workspace-boundaries.md +1 -1
  25. package/shared/rules/writing-style.md +1 -1
  26. package/shared/templates/claude-md-level1.md +7 -3
  27. package/src/bridge/core.ts +160 -56
  28. package/src/bridge/mcp-server.ts +93 -8
  29. package/src/bridge/openclaw.ts +14 -0
  30. package/src/hooks/inbox-check-hook.mjs +232 -0
  31. package/src/hooks/inbox-rewake-hook.mjs +388 -0
  32. package/src/hosted-mcp/.env.example +3 -0
  33. package/src/hosted-mcp/demo/agent.html +300 -0
  34. package/src/hosted-mcp/demo/agent.txt +84 -0
  35. package/src/hosted-mcp/demo/fallback.jpg +0 -0
  36. package/src/hosted-mcp/demo/footer.js +74 -0
  37. package/src/hosted-mcp/demo/index.html +1303 -0
  38. package/src/hosted-mcp/demo/login.html +548 -0
  39. package/src/hosted-mcp/demo/privacy.html +223 -0
  40. package/src/hosted-mcp/demo/sprites.jpg +0 -0
  41. package/src/hosted-mcp/demo/sprites.png +0 -0
  42. package/src/hosted-mcp/demo/tos.html +198 -0
  43. package/src/hosted-mcp/deploy.sh +70 -0
  44. package/src/hosted-mcp/ecosystem.config.cjs +14 -0
  45. package/src/hosted-mcp/inbox.mjs +64 -0
  46. package/src/hosted-mcp/legal/internet-services/terms/site.html +205 -0
  47. package/src/hosted-mcp/legal/privacy/en-ww/index.html +230 -0
  48. package/src/hosted-mcp/nginx/mcp-oauth.conf +98 -0
  49. package/src/hosted-mcp/nginx/mcp-server.conf +17 -0
  50. package/src/hosted-mcp/nginx/wip.computer.conf +45 -0
  51. package/src/hosted-mcp/package-lock.json +2092 -0
  52. package/src/hosted-mcp/package.json +23 -0
  53. package/src/hosted-mcp/prisma/migrations/20260406233014_init/migration.sql +68 -0
  54. package/src/hosted-mcp/prisma/migrations/migration_lock.toml +3 -0
  55. package/src/hosted-mcp/prisma/schema.prisma +57 -0
  56. package/src/hosted-mcp/prisma.config.ts +14 -0
  57. package/src/hosted-mcp/server.mjs +2093 -0
  58. package/src/hosted-mcp/shared/kaleidoscope.css +139 -0
  59. package/src/hosted-mcp/shared/kaleidoscope.js +192 -0
  60. package/src/hosted-mcp/tools.mjs +73 -0
  61. package/templates/hooks/pre-commit +5 -0
package/src/hosted-mcp/legal/internet-services/terms/site.html ADDED
@@ -0,0 +1,205 @@
1
+ <!DOCTYPE html>
2
+ <html lang="en">
3
+ <head>
4
+ <meta charset="utf-8">
5
+ <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">
6
+ <title>Terms of Service - Kaleidoscope Demo</title>
7
+ <style>
8
+ *, *::before, *::after { margin: 0; padding: 0; box-sizing: border-box; }
9
+
10
+ body {
11
+ font-family: -apple-system, BlinkMacSystemFont, "SF Pro Text", system-ui, sans-serif;
12
+ background: #FFFDF5;
13
+ color: #1a1a1a;
14
+ -webkit-font-smoothing: antialiased;
15
+ -webkit-text-size-adjust: 100%;
16
+ line-height: 1.6;
17
+ }
18
+
19
+ .container {
20
+ max-width: 640px;
21
+ margin: 0 auto;
22
+ padding: 16px 24px 80px;
23
+ }
24
+
25
+ .header {
26
+ position: sticky;
27
+ top: 0;
28
+ z-index: 100;
29
+ padding: calc(12px + env(safe-area-inset-top, 0px)) 20px 12px;
30
+ background: rgba(255, 253, 245, 0.8);
31
+ -webkit-backdrop-filter: saturate(180%) blur(20px);
32
+ backdrop-filter: saturate(180%) blur(20px);
33
+ border-bottom: 1px solid rgba(0, 0, 0, 0.06);
34
+ display: flex;
35
+ align-items: center;
36
+ }
37
+
38
+ .header a {
39
+ display: flex;
40
+ align-items: center;
41
+ text-decoration: none;
42
+ }
43
+
44
+ h1 {
45
+ font-size: 28px;
46
+ font-weight: 700;
47
+ letter-spacing: -0.02em;
48
+ margin-bottom: 4px;
49
+ }
50
+
51
+ .subtitle {
52
+ font-size: 17px;
53
+ color: #8a8580;
54
+ margin-bottom: 8px;
55
+ }
56
+
57
+ .updated {
58
+ font-size: 13px;
59
+ color: #b0aaa4;
60
+ margin-bottom: 40px;
61
+ }
62
+
63
+ section {
64
+ padding: 28px 0;
65
+ border-top: 1px solid #e8e5de;
66
+ }
67
+
68
+ section:last-of-type {
69
+ border-bottom: 1px solid #e8e5de;
70
+ }
71
+
72
+ h2 {
73
+ font-size: 16px;
74
+ font-weight: 600;
75
+ letter-spacing: -0.01em;
76
+ margin-bottom: 12px;
77
+ }
78
+
79
+ p {
80
+ font-size: 15px;
81
+ line-height: 1.65;
82
+ color: #3a3a3a;
83
+ margin-bottom: 12px;
84
+ }
85
+
86
+ p:last-child {
87
+ margin-bottom: 0;
88
+ }
89
+
90
+ ul {
91
+ list-style: none;
92
+ padding: 0;
93
+ margin-bottom: 12px;
94
+ }
95
+
96
+ ul li {
97
+ font-size: 15px;
98
+ line-height: 1.65;
99
+ color: #3a3a3a;
100
+ padding-left: 16px;
101
+ position: relative;
102
+ margin-bottom: 4px;
103
+ }
104
+
105
+ ul li::before {
106
+ content: "\2022";
107
+ position: absolute;
108
+ left: 0;
109
+ color: #b0aaa4;
110
+ }
111
+
112
+ a {
113
+ color: #1a1a1a;
114
+ }
115
+
116
+ footer {
117
+ margin-top: 48px;
118
+ text-align: center;
119
+ font-size: 12px;
120
+ color: #b0aaa4;
121
+ line-height: 1.6;
122
+ }
123
+
124
+ footer span {
125
+ display: block;
126
+ }
127
+ </style>
128
+ </head>
129
+ <body>
130
+ <div class="header">
131
+ <a id="navIcon" href="/demo/"></a>
132
+ </div>
133
+ <div class="container">
134
+
135
+ <h1>Terms of Service</h1>
136
+ <p class="subtitle">Kaleidoscope Demo</p>
137
+ <p class="updated">Last updated: April 2, 2026</p>
138
+
139
+ <section>
140
+ <p>This is a technology demonstration by WIP Computer, Inc.</p>
141
+ </section>
142
+
143
+ <section>
144
+ <h2>The Demo</h2>
145
+ <p>This demo showcases passkey authentication, biometric permission, and AI image generation. It is not a production service.</p>
146
+ </section>
147
+
148
+ <section>
149
+ <h2>Your Account</h2>
150
+ <p>Your account is created with a passkey. No email or password is stored. Your passkey lives on your device.</p>
151
+ </section>
152
+
153
+ <section>
154
+ <h2>Your Wallet</h2>
155
+ <p>The demo wallet starts with $5.00 in simulated credits. No real money is charged. The wallet balance is for demonstration purposes only.</p>
156
+ </section>
157
+
158
+ <section>
159
+ <h2>Generated Content</h2>
160
+ <p>Images generated through this demo are created using third-party AI APIs (xAI Grok Imagine). Generated content is dual-licensed:</p>
161
+ <ul>
162
+ <li>MIT License for personal, non-commercial use</li>
163
+ <li>Apache 2.0 License for commercial use</li>
164
+ </ul>
165
+ <p>Both you and WIP Computer, Inc. retain rights to generated content. We may use generated images for product development, marketing, and research.</p>
166
+ </section>
167
+
168
+ <section>
169
+ <h2>Uploaded Media</h2>
170
+ <p>Photos taken through the camera feature are processed locally in your browser. They are not uploaded to or stored on our servers. Camera access is optional and can be denied.</p>
171
+ </section>
172
+
173
+ <section>
174
+ <h2>No Warranty</h2>
175
+ <p>This demo is provided "as is" without warranty of any kind. WIP Computer, Inc. is not liable for any damages arising from use of this demo.</p>
176
+ </section>
177
+
178
+ <section>
179
+ <h2>Contact</h2>
180
+ <p><a href="mailto:hello@wip.computer">hello@wip.computer</a></p>
181
+ </section>
182
+
183
+ <footer>
184
+ <div id="kscope-footer" style="text-align:center;"></div>
185
+ </footer>
186
+ <script src="/demo/footer.js"></script>
187
+ </div>
188
+ <script>
189
+ var SPRITE_COLS = 8, SPRITE_ROWS = 3, SPRITE_TOTAL = 24;
190
+ var navIdx = Math.floor(Math.random() * SPRITE_TOTAL);
191
+ function updateNavIcon() {
192
+ var el = document.getElementById('navIcon');
193
+ if (!el) return;
194
+ var col = navIdx % SPRITE_COLS;
195
+ var row = Math.floor(navIdx / SPRITE_COLS);
196
+ var bgPosX = (col / (SPRITE_COLS - 1)) * 100;
197
+ var bgPosY = (row / (SPRITE_ROWS - 1)) * 100;
198
+ el.innerHTML = '<div style="width:28px;height:28px;overflow:hidden;"><div style="width:100%;height:100%;background:url(/demo/sprites.png);background-size:' + (SPRITE_COLS * 100) + '% ' + (SPRITE_ROWS * 100) + '%;background-position:' + bgPosX + '% ' + bgPosY + '%;"></div></div>';
199
+ navIdx = (navIdx + 1) % SPRITE_TOTAL;
200
+ }
201
+ updateNavIcon();
202
+ setInterval(updateNavIcon, 6000);
203
+ </script>
204
+ </body>
205
+ </html>
package/src/hosted-mcp/legal/privacy/en-ww/index.html ADDED
@@ -0,0 +1,230 @@
1
+ <!DOCTYPE html>
2
+ <html lang="en">
3
+ <head>
4
+ <meta charset="utf-8">
5
+ <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">
6
+ <title>Privacy Policy - Kaleidoscope Demo</title>
7
+ <style>
8
+ *, *::before, *::after { margin: 0; padding: 0; box-sizing: border-box; }
9
+
10
+ body {
11
+ font-family: -apple-system, BlinkMacSystemFont, "SF Pro Text", system-ui, sans-serif;
12
+ background: #FFFDF5;
13
+ color: #1a1a1a;
14
+ -webkit-font-smoothing: antialiased;
15
+ -webkit-text-size-adjust: 100%;
16
+ line-height: 1.6;
17
+ }
18
+
19
+ .container {
20
+ max-width: 640px;
21
+ margin: 0 auto;
22
+ padding: 16px 24px 80px;
23
+ }
24
+
25
+ .header {
26
+ position: sticky;
27
+ top: 0;
28
+ z-index: 100;
29
+ padding: calc(12px + env(safe-area-inset-top, 0px)) 20px 12px;
30
+ background: rgba(255, 253, 245, 0.8);
31
+ -webkit-backdrop-filter: saturate(180%) blur(20px);
32
+ backdrop-filter: saturate(180%) blur(20px);
33
+ border-bottom: 1px solid rgba(0, 0, 0, 0.06);
34
+ display: flex;
35
+ align-items: center;
36
+ }
37
+
38
+ .header a {
39
+ display: flex;
40
+ align-items: center;
41
+ text-decoration: none;
42
+ }
43
+
44
+ h1 {
45
+ font-size: 28px;
46
+ font-weight: 700;
47
+ letter-spacing: -0.02em;
48
+ margin-bottom: 4px;
49
+ }
50
+
51
+ .subtitle {
52
+ font-size: 17px;
53
+ color: #8a8580;
54
+ margin-bottom: 8px;
55
+ }
56
+
57
+ .updated {
58
+ font-size: 13px;
59
+ color: #b0aaa4;
60
+ margin-bottom: 40px;
61
+ }
62
+
63
+ section {
64
+ padding: 28px 0;
65
+ border-top: 1px solid #e8e5de;
66
+ }
67
+
68
+ section:last-of-type {
69
+ border-bottom: 1px solid #e8e5de;
70
+ }
71
+
72
+ h2 {
73
+ font-size: 16px;
74
+ font-weight: 600;
75
+ letter-spacing: -0.01em;
76
+ margin-bottom: 12px;
77
+ }
78
+
79
+ p {
80
+ font-size: 15px;
81
+ line-height: 1.65;
82
+ color: #3a3a3a;
83
+ margin-bottom: 12px;
84
+ }
85
+
86
+ p:last-child {
87
+ margin-bottom: 0;
88
+ }
89
+
90
+ ul {
91
+ list-style: none;
92
+ padding: 0;
93
+ margin-bottom: 12px;
94
+ }
95
+
96
+ ul li {
97
+ font-size: 15px;
98
+ line-height: 1.65;
99
+ color: #3a3a3a;
100
+ padding-left: 16px;
101
+ position: relative;
102
+ margin-bottom: 4px;
103
+ }
104
+
105
+ ul li::before {
106
+ content: "\2022";
107
+ position: absolute;
108
+ left: 0;
109
+ color: #b0aaa4;
110
+ }
111
+
112
+ a {
113
+ color: #1a1a1a;
114
+ }
115
+
116
+ footer {
117
+ margin-top: 48px;
118
+ text-align: center;
119
+ font-size: 12px;
120
+ color: #b0aaa4;
121
+ line-height: 1.6;
122
+ }
123
+
124
+ footer span {
125
+ display: block;
126
+ }
127
+ </style>
128
+ </head>
129
+ <body>
130
+ <div class="header">
131
+ <a id="navIcon" href="/demo/"></a>
132
+ </div>
133
+ <div class="container">
134
+
135
+ <h1>Privacy Policy</h1>
136
+ <p class="subtitle">Kaleidoscope Demo</p>
137
+ <p class="updated">Last updated: April 2, 2026</p>
138
+
139
+ <section>
140
+ <p>WIP Computer, Inc. ("we", "us") operates the Kaleidoscope demo at wip.computer/demo.</p>
141
+ </section>
142
+
143
+ <section>
144
+ <h2>What We Collect</h2>
145
+ <ul>
146
+ <li>Passkey credential ID and public key (for authentication)</li>
147
+ <li>Username (optional, if you provide one)</li>
148
+ <li>Wallet balance (simulated, for demo purposes)</li>
149
+ </ul>
150
+ </section>
151
+
152
+ <section>
153
+ <h2>What We Do NOT Collect</h2>
154
+ <ul>
155
+ <li>Email addresses (unless voluntarily provided later)</li>
156
+ <li>Passwords (passkeys only, no passwords exist)</li>
157
+ <li>Biometric data (Face ID / fingerprint verification happens on your device, we never receive biometric data)</li>
158
+ <li>Photos (camera captures are processed in your browser, never uploaded)</li>
159
+ <li>Browsing history or tracking data</li>
160
+ <li>Cookies (we use sessionStorage only, cleared when you close the browser)</li>
161
+ </ul>
162
+ </section>
163
+
164
+ <section>
165
+ <h2>How We Use Your Data</h2>
166
+ <ul>
167
+ <li>Authentication: verifying your passkey when you sign in</li>
168
+ <li>Demo functionality: tracking simulated wallet balance</li>
169
+ <li>Product improvement: aggregate usage patterns (no personal data)</li>
170
+ </ul>
171
+ </section>
172
+
173
+ <section>
174
+ <h2>Third-Party Services</h2>
175
+ <ul>
176
+ <li>xAI (Grok Imagine API): receives text prompts for image generation. Does not receive your photos or personal data.</li>
177
+ <li>No analytics services</li>
178
+ <li>No advertising networks</li>
179
+ <li>No data brokers</li>
180
+ </ul>
181
+ </section>
182
+
183
+ <section>
184
+ <h2>Data Storage</h2>
185
+ <p>Your passkey data is stored on our server at wip.computer. It is not encrypted at rest in this demo version. Production versions will implement end-to-end encryption where we architecturally cannot read your data.</p>
186
+ </section>
187
+
188
+ <section>
189
+ <h2>Data Deletion</h2>
190
+ <p>Contact <a href="mailto:hello@wip.computer">hello@wip.computer</a> to request deletion of your passkey data.</p>
191
+ </section>
192
+
193
+ <section>
194
+ <h2>Your Rights</h2>
195
+ <p>You can delete your passkey from your device at any time through your device settings (Settings > Passwords on iOS, chrome://settings/passwords on Chrome).</p>
196
+ </section>
197
+
198
+ <section>
199
+ <h2>Changes</h2>
200
+ <p>We may update this policy. Changes will be reflected in the "Last updated" date.</p>
201
+ </section>
202
+
203
+ <section>
204
+ <h2>Contact</h2>
205
+ <p><a href="mailto:hello@wip.computer">hello@wip.computer</a></p>
206
+ </section>
207
+
208
+ <footer>
209
+ <div id="kscope-footer" style="text-align:center;"></div>
210
+ </footer>
211
+ <script src="/demo/footer.js"></script>
212
+ </div>
213
+ <script>
214
+ var SPRITE_COLS = 8, SPRITE_ROWS = 3, SPRITE_TOTAL = 24;
215
+ var navIdx = Math.floor(Math.random() * SPRITE_TOTAL);
216
+ function updateNavIcon() {
217
+ var el = document.getElementById('navIcon');
218
+ if (!el) return;
219
+ var col = navIdx % SPRITE_COLS;
220
+ var row = Math.floor(navIdx / SPRITE_COLS);
221
+ var bgPosX = (col / (SPRITE_COLS - 1)) * 100;
222
+ var bgPosY = (row / (SPRITE_ROWS - 1)) * 100;
223
+ el.innerHTML = '<div style="width:28px;height:28px;overflow:hidden;"><div style="width:100%;height:100%;background:url(/demo/sprites.png);background-size:' + (SPRITE_COLS * 100) + '% ' + (SPRITE_ROWS * 100) + '%;background-position:' + bgPosX + '% ' + bgPosY + '%;"></div></div>';
224
+ navIdx = (navIdx + 1) % SPRITE_TOTAL;
225
+ }
226
+ updateNavIcon();
227
+ setInterval(updateNavIcon, 6000);
228
+ </script>
229
+ </body>
230
+ </html>
package/src/hosted-mcp/nginx/mcp-oauth.conf ADDED
@@ -0,0 +1,98 @@
1
+ # OAuth 2.0 + WebAuthn endpoints for MCP server
2
+ # Use exact match (=) for .well-known to override the regex deny on dotfiles
3
+ location = /.well-known/oauth-authorization-server {
4
+ proxy_pass http://127.0.0.1:18800/.well-known/oauth-authorization-server;
5
+ proxy_http_version 1.1;
6
+ proxy_set_header Host $host;
7
+ proxy_set_header X-Real-IP $remote_addr;
8
+ proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
9
+ proxy_set_header X-Forwarded-Proto $scheme;
10
+ }
11
+
12
+ location = /.well-known/oauth-protected-resource {
13
+ proxy_pass http://127.0.0.1:18800/.well-known/oauth-protected-resource;
14
+ proxy_http_version 1.1;
15
+ proxy_set_header Host $host;
16
+ proxy_set_header X-Real-IP $remote_addr;
17
+ proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
18
+ proxy_set_header X-Forwarded-Proto $scheme;
19
+ }
20
+
21
+ location /oauth/ {
22
+ proxy_pass http://127.0.0.1:18800/oauth/;
23
+ proxy_http_version 1.1;
24
+ proxy_set_header Host $host;
25
+ proxy_set_header X-Real-IP $remote_addr;
26
+ proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
27
+ proxy_set_header X-Forwarded-Proto $scheme;
28
+ }
29
+
30
+ # WebAuthn passkey authentication
31
+ location /webauthn/ {
32
+ proxy_pass http://127.0.0.1:18800/webauthn/;
33
+ proxy_http_version 1.1;
34
+ proxy_set_header Host $host;
35
+ proxy_set_header X-Real-IP $remote_addr;
36
+ proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
37
+ proxy_set_header X-Forwarded-Proto $scheme;
38
+ }
39
+
40
+ # Signup and login pages
41
+ location = /signup {
42
+ proxy_pass http://127.0.0.1:18800/signup;
43
+ proxy_http_version 1.1;
44
+ proxy_set_header Host $host;
45
+ proxy_set_header X-Real-IP $remote_addr;
46
+ proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
47
+ proxy_set_header X-Forwarded-Proto $scheme;
48
+ }
49
+
50
+ location = /login/ {
51
+ proxy_pass http://127.0.0.1:18800/login/;
52
+ proxy_http_version 1.1;
53
+ proxy_set_header Host $host;
54
+ proxy_set_header X-Real-IP $remote_addr;
55
+ proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
56
+ proxy_set_header X-Forwarded-Proto $scheme;
57
+ }
58
+
59
+ location = /login {
60
+ proxy_pass http://127.0.0.1:18800/login;
61
+ proxy_http_version 1.1;
62
+ proxy_set_header Host $host;
63
+ proxy_set_header X-Real-IP $remote_addr;
64
+ proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
65
+ proxy_set_header X-Forwarded-Proto $scheme;
66
+ }
67
+
68
+ # Agent approval page (server-generated)
69
+ location = /approve {
70
+ proxy_pass http://127.0.0.1:18800/approve;
71
+ proxy_http_version 1.1;
72
+ proxy_set_header Host $host;
73
+ proxy_set_header X-Real-IP $remote_addr;
74
+ proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
75
+ proxy_set_header X-Forwarded-Proto $scheme;
76
+ }
77
+
78
+ # Device pairing API (Bridge Phase A)
79
+ location /api/pair/ {
80
+ proxy_pass http://127.0.0.1:18800/api/pair/;
81
+ proxy_http_version 1.1;
82
+ proxy_set_header Host \$host;
83
+ proxy_set_header X-Real-IP \$remote_addr;
84
+ proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
85
+ proxy_set_header X-Forwarded-Proto \$scheme;
86
+ }
87
+
88
+ # Legal pages (production paths)
89
+ location /legal/ {
90
+ proxy_pass http://127.0.0.1:18800/legal/;
91
+ proxy_http_version 1.1;
92
+ proxy_set_header Host \$host;
93
+ proxy_set_header X-Real-IP \$remote_addr;
94
+ proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
95
+ proxy_set_header X-Forwarded-Proto \$scheme;
96
+ }
97
+
98
+ # Legal pages (production paths)
package/src/hosted-mcp/nginx/mcp-server.conf ADDED
@@ -0,0 +1,17 @@
1
+ # MCP server reverse proxy
2
+ # Location block to add inside the wip.computer server block
3
+ location /mcp {
4
+ proxy_pass http://127.0.0.1:18800/mcp;
5
+ proxy_http_version 1.1;
6
+ proxy_set_header Host $host;
7
+ proxy_set_header X-Real-IP $remote_addr;
8
+ proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
9
+ proxy_set_header X-Forwarded-Proto $scheme;
10
+
11
+ # SSE support (for MCP Streamable HTTP GET streams)
12
+ proxy_set_header Connection '';
13
+ proxy_buffering off;
14
+ proxy_cache off;
15
+ proxy_read_timeout 86400;
16
+ chunked_transfer_encoding on;
17
+ }
package/src/hosted-mcp/nginx/wip.computer.conf ADDED
@@ -0,0 +1,45 @@
1
+ server {
2
+ server_name wip.computer www.wip.computer;
3
+
4
+ root /var/www/wip.computer/public_html;
5
+ index index.html index.htm;
6
+
7
+ access_log /var/log/nginx/wip.computer.access.log;
8
+ error_log /var/log/nginx/wip.computer.error.log;
9
+
10
+ location / {
11
+ autoindex off;
12
+ try_files $uri $uri/ /index.html;
13
+ }
14
+
15
+ add_header X-Frame-Options "SAMEORIGIN" always;
16
+ add_header X-Content-Type-Options "nosniff" always;
17
+ add_header X-XSS-Protection "1; mode=block" always;
18
+
19
+ location ~ /\. {
20
+ deny all;
21
+ }
22
+
23
+ listen [::]:443 ssl;
24
+ listen 443 ssl;
25
+ ssl_certificate /etc/letsencrypt/live/wip.computer/fullchain.pem;
26
+ ssl_certificate_key /etc/letsencrypt/live/wip.computer/privkey.pem;
27
+ include /etc/letsencrypt/options-ssl-nginx.conf;
28
+ ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
29
+ }
30
+
31
+ server {
32
+ if ($host = www.wip.computer) {
33
+ return 301 https://$host$request_uri;
34
+ }
35
+
36
+ if ($host = wip.computer) {
37
+ return 301 https://$host$request_uri;
38
+ }
39
+
40
+ listen 80;
41
+ listen [::]:80;
42
+
43
+ server_name wip.computer www.wip.computer;
44
+ return 404;
45
+ }