amalgm 0.0.0 → 0.0.32

package/runtime/scripts/amalgm-mcp/toolbox/tools.js

@@ -0,0 +1,269 @@
+'use strict';
+
+const { textResult } = require('../lib/tool-result');
+const {
+  deleteTool,
+  deleteToolAction,
+  getTool,
+  getToolAction,
+  readToolbox,
+  updateTool,
+  updateToolAction,
+  upsertTool,
+  upsertToolAction,
+} = require('./store');
+
+function compactTool(tool, actionCount) {
+  return {
+    id: tool.id,
+    name: tool.name,
+    type: tool.type,
+    owner: tool.owner,
+    origin: tool.origin,
+    status: tool.status,
+    discovery: tool.discovery,
+    actionCount,
+    source: tool.source,
+    guide: tool.guide,
+    display: tool.display,
+    policy: tool.policy,
+  };
+}
+
+function listPayload(args = {}) {
+  const toolbox = readToolbox();
+  const actionsByTool = new Map();
+  for (const action of Object.values(toolbox.toolActions || {})) {
+    const existing = actionsByTool.get(action.toolId) || [];
+    existing.push(action);
+    actionsByTool.set(action.toolId, existing);
+  }
+
+  const tools = Object.values(toolbox.tools || {})
+    .filter((tool) => !args.type || tool.type === args.type)
+    .filter((tool) => !args.owner || tool.owner === args.owner)
+    .filter((tool) => !args.origin || tool.origin === args.origin)
+    .map((tool) => compactTool(tool, actionsByTool.get(tool.id)?.length || 0));
+
+  const payload = {
+    version: toolbox.version,
+    tools,
+    ...(args.include_actions
+      ? { toolActions: toolbox.toolActions }
+      : {}),
+  };
+  return payload;
+}
+
+module.exports = [
+  {
+    name: 'toolbox_tools_list',
+    description: 'List registered Amalgm Toolbox connectors/tools. Use this to see persistent user tools available across sessions.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        type: { type: 'string', enum: ['mcp', 'api', 'cli'], description: 'Optional tool type filter.' },
+        owner: { type: 'string', description: 'Optional owner filter, e.g. amalgm, claude, cursor, codex, or an agent harness id.' },
+        origin: { type: 'string', enum: ['system', 'user', 'catalog'], description: 'Optional origin filter.' },
+        include_actions: { type: 'boolean', description: 'Include full tool action records. Defaults false.' },
+      },
+    },
+    async handler(args) {
+      return textResult(JSON.stringify(listPayload(args || {}), null, 2));
+    },
+  },
+  {
+    name: 'toolbox_tool_get',
+    description: 'Read one registered Toolbox connector/tool by id, optionally including its actions.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        id: { type: 'string', description: 'Tool id to read.' },
+        include_actions: { type: 'boolean', description: 'Include actions for this tool. Defaults true.' },
+      },
+      required: ['id'],
+    },
+    async handler(args) {
+      const payload = getTool(args?.id, { includeActions: args?.include_actions !== false });
+      return textResult(JSON.stringify(payload, null, 2));
+    },
+  },
+  {
+    name: 'toolbox_tool_register',
+    description: [
+      'Register or update a persistent Toolbox connector/tool. This is how agents save custom tools for future sessions.',
+      'For CLI tools, provide type="cli" and source.command. A default <tool>.run action is created automatically unless actions are provided.',
+      'Optional skillPath/guidePath attaches usage instructions to the tool without becoming a separate callable action.',
+    ].join('\n'),
+    inputSchema: {
+      type: 'object',
+      properties: {
+        id: { type: 'string', description: 'Stable tool id, e.g. acme.executor.' },
+        name: { type: 'string', description: 'Human-readable connector/tool name.' },
+        type: { type: 'string', enum: ['mcp', 'api', 'cli'] },
+        owner: { type: 'string', description: 'Tool owner. Defaults to amalgm. Use a harness or agent id for externally owned tools.' },
+        origin: { type: 'string', enum: ['user', 'catalog'], description: 'Defaults to user.' },
+        status: { type: 'string', enum: ['enabled', 'disabled', 'error'] },
+        source: {
+          type: 'object',
+          description: 'Type-specific source config. CLI: {command,args,cwd,inputMode,outputMode}. MCP: {transport,url|command}. API: {baseUrl,specUrl,specPath,endpoints}.',
+          additionalProperties: true,
+        },
+        command: { type: 'string', description: 'CLI shortcut for source.command.' },
+        args: { type: 'array', items: { type: 'string' }, description: 'CLI/MCP stdio args shortcut.' },
+        cwd: { type: 'string', description: 'Working directory shortcut.' },
+        inputMode: { type: 'string', enum: ['json-stdin', 'argv', 'terminal', 'none'] },
+        outputMode: { type: 'string', enum: ['json', 'text'] },
+        skillPath: { type: 'string', description: 'Optional local SKILL.md path with usage guidance.' },
+        guidePath: { type: 'string', description: 'Optional local guide path with usage guidance.' },
+        display: { type: 'object', additionalProperties: true },
+        policy: { type: 'object', additionalProperties: true },
+        actions: {
+          type: 'array',
+          description: 'Optional static action records to create/update with the tool.',
+          items: { type: 'object', additionalProperties: true },
+        },
+      },
+      required: ['id', 'name', 'type'],
+    },
+    async handler(args) {
+      const saved = upsertTool(args || {});
+      return textResult(JSON.stringify({ ok: true, ...saved }, null, 2));
+    },
+  },
+  {
+    name: 'toolbox_tool_update',
+    description: [
+      'Partially update an existing Toolbox connector/tool without replacing unspecified fields.',
+      'Use this for modifications like status, display metadata, policy, guide/skill path, owner, or source patches.',
+      'System tools cannot be modified.',
+    ].join('\n'),
+    inputSchema: {
+      type: 'object',
+      properties: {
+        id: { type: 'string', description: 'Tool id to update.' },
+        name: { type: 'string', description: 'Optional new human-readable name.' },
+        type: { type: 'string', enum: ['mcp', 'api', 'cli'], description: 'Optional type update.' },
+        owner: { type: 'string', description: 'Optional owner update.' },
+        origin: { type: 'string', enum: ['user', 'catalog'], description: 'Optional origin update.' },
+        status: { type: 'string', enum: ['enabled', 'disabled', 'error'] },
+        source: {
+          type: 'object',
+          description: 'Partial source patch. CLI: {command,args,cwd,inputMode,outputMode}. MCP: {transport,url|command}. API: {baseUrl,specUrl,specPath,endpoints}.',
+          additionalProperties: true,
+        },
+        command: { type: 'string', description: 'CLI shortcut for source.command.' },
+        args: { type: 'array', items: { type: 'string' }, description: 'CLI/MCP stdio args shortcut.' },
+        cwd: { type: 'string', description: 'Working directory shortcut.' },
+        inputMode: { type: 'string', enum: ['json-stdin', 'argv', 'terminal', 'none'] },
+        outputMode: { type: 'string', enum: ['json', 'text'] },
+        discovery: { type: 'object', additionalProperties: true },
+        skillPath: { type: 'string', description: 'Optional local SKILL.md path with usage guidance.' },
+        guidePath: { type: 'string', description: 'Optional local guide path with usage guidance.' },
+        guide: { type: 'object', additionalProperties: true },
+        display: { type: 'object', additionalProperties: true },
+        policy: { type: 'object', additionalProperties: true },
+      },
+      required: ['id'],
+    },
+    async handler(args) {
+      const saved = updateTool(args || {});
+      return textResult(JSON.stringify({ ok: true, ...saved }, null, 2));
+    },
+  },
+  {
+    name: 'toolbox_action_get',
+    description: 'Read one registered Toolbox action by id.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        id: { type: 'string', description: 'Tool action id to read.' },
+      },
+      required: ['id'],
+    },
+    async handler(args) {
+      const payload = getToolAction(args?.id);
+      return textResult(JSON.stringify(payload, null, 2));
+    },
+  },
+  {
+    name: 'toolbox_action_register',
+    description: 'Register or update a persistent action under an existing Toolbox tool. Use this for richer CLI/API schemas beyond the default run action.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        id: { type: 'string', description: 'Stable action id, e.g. acme.executor.run_job.' },
+        toolId: { type: 'string', description: 'Parent tool id.' },
+        name: { type: 'string', description: 'Action name, e.g. run_job.' },
+        displayName: { type: 'string' },
+        description: { type: 'string' },
+        inputSchema: { type: 'object', additionalProperties: true },
+        outputSchema: { type: 'object', additionalProperties: true },
+        status: { type: 'string', enum: ['enabled', 'disabled', 'error'] },
+        sourceAction: { type: 'object', additionalProperties: true },
+        skillPath: { type: 'string', description: 'Optional local SKILL.md path with usage guidance.' },
+        guidePath: { type: 'string', description: 'Optional local guide path with usage guidance.' },
+        policy: { type: 'object', additionalProperties: true },
+      },
+      required: ['toolId', 'name'],
+    },
+    async handler(args) {
+      const action = upsertToolAction(args || {});
+      return textResult(JSON.stringify({ ok: true, action }, null, 2));
+    },
+  },
+  {
+    name: 'toolbox_action_update',
+    description: 'Partially update an existing Toolbox action without replacing unspecified fields. System tool actions cannot be modified.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        id: { type: 'string', description: 'Tool action id to update.' },
+        name: { type: 'string', description: 'Optional action name update.' },
+        displayName: { type: 'string' },
+        description: { type: 'string' },
+        inputSchema: { type: 'object', additionalProperties: true },
+        outputSchema: { type: 'object', additionalProperties: true },
+        status: { type: 'string', enum: ['enabled', 'disabled', 'error'] },
+        sourceAction: { type: 'object', additionalProperties: true },
+        skillPath: { type: 'string', description: 'Optional local SKILL.md path with usage guidance.' },
+        guidePath: { type: 'string', description: 'Optional local guide path with usage guidance.' },
+        guide: { type: 'object', additionalProperties: true },
+        policy: { type: 'object', additionalProperties: true },
+      },
+      required: ['id'],
+    },
+    async handler(args) {
+      const action = updateToolAction(args || {});
+      return textResult(JSON.stringify({ ok: true, action }, null, 2));
+    },
+  },
+  {
+    name: 'toolbox_tool_delete',
+    description: 'Delete a user/catalog Toolbox tool and its actions. System tools cannot be deleted.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        id: { type: 'string', description: 'Tool id to delete.' },
+      },
+      required: ['id'],
+    },
+    async handler(args) {
+      return textResult(JSON.stringify(deleteTool(args?.id), null, 2));
+    },
+  },
+  {
+    name: 'toolbox_action_delete',
+    description: 'Delete a user/catalog Toolbox action. System tool actions cannot be deleted.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        id: { type: 'string', description: 'Tool action id to delete.' },
+      },
+      required: ['id'],
+    },
+    async handler(args) {
+      return textResult(JSON.stringify(deleteToolAction(args?.id), null, 2));
+    },
+  },
+];

package/runtime/scripts/amalgm-mcp/user-api-keys/rest.js

@@ -0,0 +1,105 @@
+/**
+ * /user-api-keys REST routes for the Next.js API to call.
+ * Not part of the MCP tool surface — used by the internal UI.
+ */
+
+const fs = require('fs');
+const path = require('path');
+const { AMALGM_DIR } = require('../config');
+const { getEnvKeyNameForHarness } = require('../../../lib/harnesses.js');
+const { deleteCredential, listCredentials, upsertCredential } = require('../../chat-core/credentials/store');
+
+const CREDENTIALS_PATH = path.join(AMALGM_DIR, '.amalgm-credentials');
+
+function shellQuote(value) {
+  return `'${String(value).replace(/'/g, "'\\''")}'`;
+}
+
+function decodeShellValue(rawValue) {
+  const value = String(rawValue ?? '').trim();
+  if (value.startsWith("'") && value.endsWith("'")) {
+    return value.slice(1, -1).replace(/'\\''/g, "'");
+  }
+  if (value.startsWith('"') && value.endsWith('"')) {
+    return value
+      .slice(1, -1)
+      .replace(/\\"/g, '"')
+      .replace(/\\\$/g, '$')
+      .replace(/\\\\/g, '\\');
+  }
+  return value;
+}
+
+function readCredentialExports() {
+  const values = {};
+  try {
+    const raw = fs.readFileSync(CREDENTIALS_PATH, 'utf-8');
+    for (const line of raw.split(/\r?\n/)) {
+      const match = line.match(/^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)=(.*)\s*$/);
+      if (!match) continue;
+      values[match[1]] = decodeShellValue(match[2]);
+    }
+  } catch {
+    // No existing credential file.
+  }
+  return values;
+}
+
+function writeCredentialExports(values) {
+  const keys = Object.keys(values).sort();
+  const content = keys
+    .map((key) => `export ${key}=${shellQuote(values[key])}`)
+    .join('\n') + '\n';
+  fs.mkdirSync(path.dirname(CREDENTIALS_PATH), { recursive: true });
+  fs.writeFileSync(CREDENTIALS_PATH, content, { mode: 0o600 });
+}
+
+async function handleSave(body, sendJson) {
+  try {
+    const { harnessId, apiKey } = body || {};
+
+    if (!harnessId || !apiKey) {
+      return sendJson(400, { error: 'harnessId and apiKey are required' });
+    }
+
+    const envKeyName = getEnvKeyNameForHarness(harnessId);
+    const values = readCredentialExports();
+    values[envKeyName] = apiKey;
+    writeCredentialExports(values);
+    const baseUrl = harnessId === 'claude_code'
+      ? 'https://api.anthropic.com'
+      : harnessId === 'opencode'
+        ? 'https://ai-gateway.vercel.sh/v1'
+        : 'https://api.openai.com/v1';
+    upsertCredential(AMALGM_DIR, {
+      name: harnessId === 'claude_code' ? 'Anthropic' : harnessId === 'opencode' ? 'Vercel AI Gateway' : 'OpenAI',
+      baseUrl,
+      key: apiKey,
+    });
+
+    sendJson(200, { keyHint: `...${String(apiKey).slice(-4)}` });
+  } catch (error) {
+    sendJson(500, {
+      error: error instanceof Error ? error.message : 'Failed to save API key',
+    });
+  }
+}
+
+async function handleDelete(sendJson) {
+  try {
+    fs.rmSync(CREDENTIALS_PATH, { force: true });
+    for (const credential of listCredentials(AMALGM_DIR)) {
+      deleteCredential(AMALGM_DIR, credential.id);
+    }
+    sendJson(200, { ok: true });
+  } catch (error) {
+    sendJson(500, {
+      error: error instanceof Error ? error.message : 'Failed to remove API key',
+    });
+  }
+}
+
+module.exports = {
+  handleDelete,
+  handleSave,
+};