chat-recall 0.5.32 → 0.6.0

package/dist/mcp-relay.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=mcp-relay.d.ts.map

package/dist/mcp-relay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-relay.d.ts","sourceRoot":"","sources":["../src/mcp-relay.ts"],"names":[],"mappings":""}

package/dist/mcp-relay.js

@@ -0,0 +1,229 @@
+#!/usr/bin/env node
+import { createRequire as __cr } from 'module'; const require = __cr(import.meta.url);
+
+// src/mcp-relay.ts
+import { connect } from "node:net";
+import { spawn } from "node:child_process";
+import { openSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+
+// src/mcp-socket.ts
+import { createHash } from "node:crypto";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { accessSync, chmodSync, constants, mkdirSync, statSync } from "node:fs";
+import { dirname } from "node:path";
+var MAX_PATH = 100;
+var fits = (dir) => dir.length + 1 + 16 + 5 <= MAX_PATH;
+function socketDirCandidates() {
+  if (process.platform === "win32") {
+    const out2 = [];
+    if (process.env.LOCALAPPDATA) out2.push(join(process.env.LOCALAPPDATA, "chat-recall", "run"));
+    if (process.env.TEMP) out2.push(join(process.env.TEMP, "chat-recall-run"));
+    out2.push(join(tmpdir(), "chat-recall-run"));
+    return out2;
+  }
+  const out = [];
+  const xdg = process.env.XDG_RUNTIME_DIR;
+  if (xdg && xdg.length > 0) {
+    const p = join(xdg, "chat-recall");
+    if (fits(p)) out.push(p);
+  }
+  const uid = typeof process.getuid === "function" ? process.getuid() : 0;
+  const named = join(tmpdir(), `chat-recall-${uid}`);
+  if (fits(named)) out.push(named);
+  const last = `/tmp/chat-recall-${uid}`;
+  if (!out.includes(last)) out.push(last);
+  return out;
+}
+var MAX_MISSING_LEVELS = 8;
+function isDir(path) {
+  try {
+    return statSync(path).isDirectory();
+  } catch {
+    return false;
+  }
+}
+function usableDir(dir) {
+  if (!isDir(dir)) {
+    const missing = [];
+    let cur = dir;
+    let base = false;
+    while (missing.length < MAX_MISSING_LEVELS) {
+      const parent = dirname(cur);
+      if (parent === cur) break;
+      missing.push(cur);
+      if (isDir(parent)) {
+        base = true;
+        break;
+      }
+      cur = parent;
+    }
+    if (!base) return false;
+    for (let i = missing.length - 1; i >= 0; i--) {
+      try {
+        mkdirSync(missing[i]);
+      } catch {
+      }
+      if (!isDir(missing[i])) return false;
+    }
+  }
+  try {
+    accessSync(dir, constants.W_OK);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function privateDir(dir) {
+  if (process.platform === "win32") return true;
+  try {
+    chmodSync(dir, 448);
+    return (statSync(dir).mode & 63) === 0;
+  } catch {
+    return false;
+  }
+}
+function ensureSocketDir() {
+  const candidates = socketDirCandidates();
+  for (const dir of candidates) {
+    if (!usableDir(dir)) continue;
+    if (!privateDir(dir)) continue;
+    return dir;
+  }
+  throw new Error(`no private runtime directory for the MCP daemon (tried ${candidates.join(", ")})`);
+}
+function socketSlug(version) {
+  const key = [
+    process.env.CHAT_RECALL_MCP_PROFILE ?? "",
+    process.env.CHAT_RECALL_SERVER ?? "",
+    version
+  ].join(" ");
+  return createHash("sha256").update(key).digest("hex").slice(0, 16);
+}
+function socketPath(dir, version) {
+  const slug = socketSlug(version);
+  if (process.platform === "win32") return "\\\\.\\pipe\\chat-recall-" + slug;
+  return join(dir, `${slug}.sock`);
+}
+function logPath(dir, version) {
+  return join(dir, `${socketSlug(version)}.log`);
+}
+var SOCKET_FLAG = "--socket";
+function daemonEnabled() {
+  const v = process.env.CHAT_RECALL_NO_DAEMON;
+  if (v === void 0) return true;
+  const t = v.trim();
+  return t === "" || t === "0" || t === "false";
+}
+
+// src/mcp-relay.ts
+var VERSION = true ? "0.6.0" : "0.0.0";
+var SERVER_URL = new URL("./mcp.js", import.meta.url);
+var SERVER_PATH = fileURLToPath(SERVER_URL);
+var START_TIMEOUT_MS = 15e3;
+var RETRY_MS = 100;
+async function serveInProcess() {
+  const spec = SERVER_URL.href;
+  await import(spec);
+}
+function tryConnect(path) {
+  return new Promise((resolve) => {
+    const sock = connect(path);
+    const give_up = () => {
+      sock.destroy();
+      resolve(null);
+    };
+    sock.once("connect", () => {
+      sock.removeListener("error", give_up);
+      resolve(sock);
+    });
+    sock.once("error", give_up);
+  });
+}
+function startDaemon(dir, sock) {
+  try {
+    let err = "ignore";
+    try {
+      err = openSync(logPath(dir, VERSION), "a");
+    } catch {
+    }
+    const child = spawn(process.execPath, [SERVER_PATH, "--daemon", SOCKET_FLAG, sock], {
+      detached: true,
+      stdio: ["ignore", "ignore", err],
+      env: process.env
+    });
+    child.unref();
+    return child;
+  } catch {
+    return null;
+  }
+}
+function relay(sock) {
+  process.stdin.pipe(sock);
+  sock.pipe(process.stdout);
+  const done = (code) => {
+    try {
+      sock.destroy();
+    } catch {
+    }
+    process.exit(code);
+  };
+  process.stdin.on("end", () => sock.end());
+  sock.on("close", () => done(0));
+  sock.on("error", () => done(0));
+}
+var sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+async function main() {
+  if (!daemonEnabled()) {
+    await serveInProcess();
+    return;
+  }
+  let dir;
+  let path;
+  try {
+    dir = ensureSocketDir();
+    path = socketPath(dir, VERSION);
+  } catch {
+    await serveInProcess();
+    return;
+  }
+  const existing = await tryConnect(path);
+  if (existing) {
+    relay(existing);
+    return;
+  }
+  const child = startDaemon(dir, path);
+  if (!child) {
+    await serveInProcess();
+    return;
+  }
+  const deadline = Date.now() + START_TIMEOUT_MS;
+  while (Date.now() < deadline) {
+    await sleep(RETRY_MS);
+    const sock = await tryConnect(path);
+    if (sock) {
+      relay(sock);
+      return;
+    }
+    if (child.exitCode !== null || child.signalCode !== null) {
+      const sibling = await tryConnect(path);
+      if (sibling) {
+        relay(sibling);
+        return;
+      }
+      break;
+    }
+  }
+  console.error("[mcp] no daemon answered; serving this session in-process");
+  await serveInProcess();
+}
+main().catch(async (err) => {
+  console.error("[mcp] relay failed, serving in-process:", err?.message ?? err);
+  try {
+    await serveInProcess();
+  } catch (inner) {
+    console.error("[mcp] could not start the server at all:", inner);
+    process.exit(1);
+  }
+});

package/dist/mcp-relay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-relay.js","sourceRoot":"","sources":["../src/mcp-relay.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,OAAO,EAAe,MAAM,UAAU,CAAC;AAChD,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,eAAe,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAGnG,MAAM,OAAO,GAAG,OAAO,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC;AAEhF,mDAAmD;AACnD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACxD;;;;;;GAMG;AACH,MAAM,WAAW,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;AAE9C,+DAA+D;AAC/D,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAChC,MAAM,QAAQ,GAAG,GAAG,CAAC;AAErB;;;;;;GAMG;AACH,KAAK,UAAU,cAAc;IAC3B,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;IAC7B,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;YACxB,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,WAAW,CAAC,GAAW,EAAE,IAAY;IAC5C,IAAI,CAAC;QACH,IAAI,GAAG,GAAsB,QAAQ,CAAC;QACtC,IAAI,CAAC;YACH,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;QACjE,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE;YAClF,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC;YAChC,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,qDAAqD;AACrD,SAAS,KAAK,CAAC,IAAY;IACzB,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAE1B,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE;QAC5B,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC,CAAC;IAEF,8EAA8E;IAC9E,8EAA8E;IAC9E,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1C,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAEpE,KAAK,UAAU,IAAI;IACjB,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACrB,MAAM,cAAc,EAAE,CAAC;QACvB,OAAO;IACT,CAAC;IAED,IAAI,GAAW,CAAC;IAChB,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,eAAe,EAAE,CAAC;QACxB,IAAI,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,cAAc,EAAE,CAAC;QACvB,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,QAAQ,EAAE,CAAC;QACb,KAAK,CAAC,QAAQ,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,cAAc,EAAE,CAAC;QACvB,OAAO;IACT,CAAC;IAED,2EAA2E;IAC3E,wDAAwD;IACxD,EAAE;IACF,4EAA4E;IAC5E,0EAA0E;IAC1E,6EAA6E;IAC7E,6EAA6E;IAC7E,iDAAiD;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,CAAC;IAC/C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;QACtB,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,IAAI,EAAE,CAAC;YACT,KAAK,CAAC,IAAI,CAAC,CAAC;YACZ,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YACzD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,OAAO,EAAE,CAAC;gBACZ,KAAK,CAAC,OAAO,CAAC,CAAC;gBACf,OAAO;YACT,CAAC;YACD,MAAM;QACR,CAAC;IACH,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC3E,MAAM,cAAc,EAAE,CAAC;AACzB,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IACzB,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,GAAG,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC;IAC9E,IAAI,CAAC;QACH,MAAM,cAAc,EAAE,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,KAAK,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/mcp-socket.d.ts

@@ -0,0 +1,98 @@
+/**
+ * Every directory the socket and the daemon log may live in, best first.
+ *
+ * XDG_RUNTIME_DIR first: it is per-user, mode 0700, and cleared on logout, so a
+ * socket never outlives the login session that made it. macOS never sets it,
+ * hence the per-uid directory under TMPDIR — which is also what keeps one
+ * user's socket out of another's reach on a shared /tmp. `/tmp` itself is the
+ * last resort: a TMPDIR long enough to break the path limit still leaves it.
+ *
+ * This is a LIST, not one answer, because every entry but the last comes from
+ * the environment. A sandbox, a read-only mount or a stale variable pointing at
+ * a directory this user cannot write makes the first choice fail, and one
+ * failed candidate must cost a session nothing: the next one is tried.
+ */
+export declare function socketDirCandidates(): string[];
+/**
+ * Create `dir` if it is missing, and report whether it is a directory this
+ * process can write afterwards. Never throws: a candidate that cannot be used
+ * is a reason to try the next one, not a failure.
+ *
+ * Deliberately NOT `mkdirSync(dir, { recursive: true })`. Node 23's recursive
+ * mkdir walks BACK to the parent whenever a component reports ENOENT and
+ * forward again when one exists — and a path whose parent exists while the
+ * child still reports ENOENT makes it oscillate between the two forever, at
+ * 100% of a core. `/proc/anything` does exactly that on Linux: `mkdir
+ * /proc/x` returns ENOENT, not EACCES. This path comes from XDG_RUNTIME_DIR or
+ * TMPDIR — the values this program does not control — so it must never be
+ * handed to that loop. (Verified on Node v23.9.0: the recursive call never
+ * returns; a single-level `mkdirSync` on the same path throws ENOENT at once.)
+ *
+ * This walks up to the deepest ancestor that already exists, bounded, then
+ * creates forward from there ONE level at a time. It never revisits a level,
+ * so it cannot spin.
+ */
+export declare function usableDir(dir: string): boolean;
+/**
+ * Make `dir` private to this user, and report whether that took effect.
+ *
+ * This is also the OWNERSHIP proof. `usableDir` says yes to anything writable,
+ * and on a shared /tmp that includes a directory another local user created
+ * first — our socket would then sit in their directory, theirs to swap out.
+ * chmod(2) fails with EPERM for anyone but the owner, so a chmod that
+ * succeeded means we own the directory; the mode check after it catches a
+ * filesystem that accepts chmod and ignores it (FAT, some FUSE mounts). No
+ * uid comparison, no window between a stat and a chmod. Windows has no POSIX
+ * modes; the per-user LOCALAPPDATA path is the protection there.
+ */
+export declare function privateDir(dir: string): boolean;
+/**
+ * The runtime directory for this user: the first candidate that can be used
+ * AND made private, created on the way. Throws only when NO candidate works,
+ * which the relay turns into serving the session in-process.
+ */
+export declare function ensureSocketDir(): string;
+/**
+ * Close the socket file itself to other users. connect(2) needs write
+ * permission on a Unix socket, so 0600 refuses every other uid even if the
+ * directory were traversable. Named pipes on Windows are not files.
+ */
+export declare function restrictSocket(path: string): void;
+/**
+ * What makes two sessions share a daemon.
+ *
+ * The profile decides WHICH TOOLS a server registers — "lean" is 27, "full" is
+ * all 61 — and that list is fixed when the server object is built. Two sessions
+ * that asked for different lists therefore cannot share one daemon; keying on it
+ * gives them one each. The server URL is in the key for the same reason: a
+ * daemon holds a connection to one backend.
+ *
+ * The version is in it because without it an upgraded package would attach to a
+ * daemon still running the old code — the handshake would succeed and every
+ * answer would come from the version the user believes they replaced.
+ */
+export declare function socketSlug(version: string): string;
+/**
+ * The address the daemon listens on, inside the runtime directory the caller
+ * resolved with `ensureSocketDir()`.
+ *
+ * Windows gets a named pipe rather than a file. Node's local-domain sockets ARE
+ * named pipes there, and a path outside the pipe namespace is not a valid one —
+ * so this is the native equivalent, not a workaround. It also needs no
+ * directory and leaves nothing behind when the daemon dies.
+ */
+export declare function socketPath(dir: string, version: string): string;
+/** Where a daemon's diagnostics go. Never a session's stderr: it outlives it. */
+export declare function logPath(dir: string, version: string): string;
+/**
+ * The flag the relay hands the daemon it starts. The relay already resolved a
+ * directory and is waiting on that exact path, so the daemon binds there rather
+ * than resolving again — a second resolution could land somewhere else if the
+ * environment shifted between the two processes.
+ */
+export declare const SOCKET_FLAG = "--socket";
+/** The path given with `--socket`, if the process was started with one. */
+export declare function socketPathFromArgv(argv: readonly string[]): string | undefined;
+/** True unless the user asked to keep everything inside their own session. */
+export declare function daemonEnabled(): boolean;
+//# sourceMappingURL=mcp-socket.d.ts.map

package/dist/mcp-socket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-socket.d.ts","sourceRoot":"","sources":["../src/mcp-socket.ts"],"names":[],"mappings":"AAuBA;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,EAAE,CAoB9C;AAeD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAmC9C;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAQ/C;AAED;;;;GAIG;AACH,wBAAgB,eAAe,IAAI,MAAM,CAQxC;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAOjD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAOlD;AAED;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAI/D;AAED,iFAAiF;AACjF,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED;;;;;GAKG;AACH,eAAO,MAAM,WAAW,aAAa,CAAC;AAEtC,2EAA2E;AAC3E,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAK9E;AAED,8EAA8E;AAC9E,wBAAgB,aAAa,IAAI,OAAO,CAKvC"}

package/dist/mcp-socket.js

@@ -0,0 +1,249 @@
+/**
+ * Where a chat-recall MCP daemon listens, and how a session reaches it.
+ *
+ * One daemon per (profile, server, version) — not one per session. Every MCP
+ * session on a machine used to be a full copy of this package: the whole bundle
+ * loaded, its own background sync loop, its own skills check. They now share
+ * one, and each session is a thin relay onto it.
+ *
+ * Imported by BOTH the relay and the server, so it may use Node builtins only.
+ * Anything heavier here lands in the relay bundle and undoes the point of it.
+ */
+import { createHash } from 'node:crypto';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { accessSync, chmodSync, constants, mkdirSync, statSync } from 'node:fs';
+import { dirname } from 'node:path';
+/** POSIX allows 108 bytes for a socket path, macOS 104. Stay well inside. */
+const MAX_PATH = 100;
+/** Room a candidate directory must leave for `/<16-hex slug>.sock`. */
+const fits = (dir) => dir.length + 1 + 16 + 5 <= MAX_PATH;
+/**
+ * Every directory the socket and the daemon log may live in, best first.
+ *
+ * XDG_RUNTIME_DIR first: it is per-user, mode 0700, and cleared on logout, so a
+ * socket never outlives the login session that made it. macOS never sets it,
+ * hence the per-uid directory under TMPDIR — which is also what keeps one
+ * user's socket out of another's reach on a shared /tmp. `/tmp` itself is the
+ * last resort: a TMPDIR long enough to break the path limit still leaves it.
+ *
+ * This is a LIST, not one answer, because every entry but the last comes from
+ * the environment. A sandbox, a read-only mount or a stale variable pointing at
+ * a directory this user cannot write makes the first choice fail, and one
+ * failed candidate must cost a session nothing: the next one is tried.
+ */
+export function socketDirCandidates() {
+    if (process.platform === 'win32') {
+        const out = [];
+        if (process.env.LOCALAPPDATA)
+            out.push(join(process.env.LOCALAPPDATA, 'chat-recall', 'run'));
+        if (process.env.TEMP)
+            out.push(join(process.env.TEMP, 'chat-recall-run'));
+        out.push(join(tmpdir(), 'chat-recall-run'));
+        return out;
+    }
+    const out = [];
+    const xdg = process.env.XDG_RUNTIME_DIR;
+    if (xdg && xdg.length > 0) {
+        const p = join(xdg, 'chat-recall');
+        if (fits(p))
+            out.push(p);
+    }
+    const uid = typeof process.getuid === 'function' ? process.getuid() : 0;
+    const named = join(tmpdir(), `chat-recall-${uid}`);
+    if (fits(named))
+        out.push(named);
+    const last = `/tmp/chat-recall-${uid}`;
+    if (!out.includes(last))
+        out.push(last);
+    return out;
+}
+/** How many missing levels this will build before giving up. A runtime
+ *  directory is one or two below something that already exists; deeper than
+ *  this means the path is wrong, not a tree worth creating. */
+const MAX_MISSING_LEVELS = 8;
+function isDir(path) {
+    try {
+        return statSync(path).isDirectory();
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Create `dir` if it is missing, and report whether it is a directory this
+ * process can write afterwards. Never throws: a candidate that cannot be used
+ * is a reason to try the next one, not a failure.
+ *
+ * Deliberately NOT `mkdirSync(dir, { recursive: true })`. Node 23's recursive
+ * mkdir walks BACK to the parent whenever a component reports ENOENT and
+ * forward again when one exists — and a path whose parent exists while the
+ * child still reports ENOENT makes it oscillate between the two forever, at
+ * 100% of a core. `/proc/anything` does exactly that on Linux: `mkdir
+ * /proc/x` returns ENOENT, not EACCES. This path comes from XDG_RUNTIME_DIR or
+ * TMPDIR — the values this program does not control — so it must never be
+ * handed to that loop. (Verified on Node v23.9.0: the recursive call never
+ * returns; a single-level `mkdirSync` on the same path throws ENOENT at once.)
+ *
+ * This walks up to the deepest ancestor that already exists, bounded, then
+ * creates forward from there ONE level at a time. It never revisits a level,
+ * so it cannot spin.
+ */
+export function usableDir(dir) {
+    if (!isDir(dir)) {
+        // Collect missing components up to the first existing ancestor.
+        const missing = [];
+        let cur = dir;
+        let base = false;
+        while (missing.length < MAX_MISSING_LEVELS) {
+            const parent = dirname(cur);
+            if (parent === cur)
+                break; // reached the root
+            missing.push(cur);
+            if (isDir(parent)) {
+                base = true;
+                break;
+            }
+            cur = parent;
+        }
+        // No existing directory within the bound: the path is not somewhere this
+        // program should be building a tree.
+        if (!base)
+            return false;
+        for (let i = missing.length - 1; i >= 0; i--) {
+            try {
+                mkdirSync(missing[i]); // single level — throws ENOENT rather than spins
+            }
+            catch {
+                /* judged by what exists, not by what mkdir said (EEXIST is fine) */
+            }
+            if (!isDir(missing[i]))
+                return false;
+        }
+    }
+    try {
+        accessSync(dir, constants.W_OK);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Make `dir` private to this user, and report whether that took effect.
+ *
+ * This is also the OWNERSHIP proof. `usableDir` says yes to anything writable,
+ * and on a shared /tmp that includes a directory another local user created
+ * first — our socket would then sit in their directory, theirs to swap out.
+ * chmod(2) fails with EPERM for anyone but the owner, so a chmod that
+ * succeeded means we own the directory; the mode check after it catches a
+ * filesystem that accepts chmod and ignores it (FAT, some FUSE mounts). No
+ * uid comparison, no window between a stat and a chmod. Windows has no POSIX
+ * modes; the per-user LOCALAPPDATA path is the protection there.
+ */
+export function privateDir(dir) {
+    if (process.platform === 'win32')
+        return true;
+    try {
+        chmodSync(dir, 0o700);
+        return (statSync(dir).mode & 0o077) === 0;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * The runtime directory for this user: the first candidate that can be used
+ * AND made private, created on the way. Throws only when NO candidate works,
+ * which the relay turns into serving the session in-process.
+ */
+export function ensureSocketDir() {
+    const candidates = socketDirCandidates();
+    for (const dir of candidates) {
+        if (!usableDir(dir))
+            continue;
+        if (!privateDir(dir))
+            continue;
+        return dir;
+    }
+    throw new Error(`no private runtime directory for the MCP daemon (tried ${candidates.join(', ')})`);
+}
+/**
+ * Close the socket file itself to other users. connect(2) needs write
+ * permission on a Unix socket, so 0600 refuses every other uid even if the
+ * directory were traversable. Named pipes on Windows are not files.
+ */
+export function restrictSocket(path) {
+    if (process.platform === 'win32')
+        return;
+    try {
+        chmodSync(path, 0o600);
+    }
+    catch {
+        /* the directory is already 0700; this is the second lock, not the only one */
+    }
+}
+/**
+ * What makes two sessions share a daemon.
+ *
+ * The profile decides WHICH TOOLS a server registers — "lean" is 27, "full" is
+ * all 61 — and that list is fixed when the server object is built. Two sessions
+ * that asked for different lists therefore cannot share one daemon; keying on it
+ * gives them one each. The server URL is in the key for the same reason: a
+ * daemon holds a connection to one backend.
+ *
+ * The version is in it because without it an upgraded package would attach to a
+ * daemon still running the old code — the handshake would succeed and every
+ * answer would come from the version the user believes they replaced.
+ */
+export function socketSlug(version) {
+    const key = [
+        process.env.CHAT_RECALL_MCP_PROFILE ?? '',
+        process.env.CHAT_RECALL_SERVER ?? '',
+        version,
+    ].join(' ');
+    return createHash('sha256').update(key).digest('hex').slice(0, 16);
+}
+/**
+ * The address the daemon listens on, inside the runtime directory the caller
+ * resolved with `ensureSocketDir()`.
+ *
+ * Windows gets a named pipe rather than a file. Node's local-domain sockets ARE
+ * named pipes there, and a path outside the pipe namespace is not a valid one —
+ * so this is the native equivalent, not a workaround. It also needs no
+ * directory and leaves nothing behind when the daemon dies.
+ */
+export function socketPath(dir, version) {
+    const slug = socketSlug(version);
+    if (process.platform === 'win32')
+        return '\\\\.\\pipe\\chat-recall-' + slug;
+    return join(dir, `${slug}.sock`);
+}
+/** Where a daemon's diagnostics go. Never a session's stderr: it outlives it. */
+export function logPath(dir, version) {
+    return join(dir, `${socketSlug(version)}.log`);
+}
+/**
+ * The flag the relay hands the daemon it starts. The relay already resolved a
+ * directory and is waiting on that exact path, so the daemon binds there rather
+ * than resolving again — a second resolution could land somewhere else if the
+ * environment shifted between the two processes.
+ */
+export const SOCKET_FLAG = '--socket';
+/** The path given with `--socket`, if the process was started with one. */
+export function socketPathFromArgv(argv) {
+    const i = argv.indexOf(SOCKET_FLAG);
+    if (i === -1)
+        return undefined;
+    const v = argv[i + 1];
+    return v && !v.startsWith('--') ? v : undefined;
+}
+/** True unless the user asked to keep everything inside their own session. */
+export function daemonEnabled() {
+    const v = process.env.CHAT_RECALL_NO_DAEMON;
+    if (v === undefined)
+        return true;
+    const t = v.trim();
+    return t === '' || t === '0' || t === 'false';
+}
+//# sourceMappingURL=mcp-socket.js.map

package/dist/mcp-socket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-socket.js","sourceRoot":"","sources":["../src/mcp-socket.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAChF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,6EAA6E;AAC7E,MAAM,QAAQ,GAAG,GAAG,CAAC;AAErB,uEAAuE;AACvE,MAAM,IAAI,GAAG,CAAC,GAAW,EAAW,EAAE,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,QAAQ,CAAC;AAE3E;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,mBAAmB;IACjC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC;QAC7F,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAC1E,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAC5C,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IACxC,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,GAAG,EAAE,CAAC,CAAC;IACnD,IAAI,IAAI,CAAC,KAAK,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,oBAAoB,GAAG,EAAE,CAAC;IACvC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;+DAE+D;AAC/D,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAE7B,SAAS,KAAK,CAAC,IAAY;IACzB,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAChB,gEAAgE;QAChE,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,GAAG,GAAG,GAAG,CAAC;QACd,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,OAAO,OAAO,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,MAAM,KAAK,GAAG;gBAAE,MAAM,CAAC,mBAAmB;YAC9C,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClB,IAAI,GAAG,IAAI,CAAC;gBACZ,MAAM;YACR,CAAC;YACD,GAAG,GAAG,MAAM,CAAC;QACf,CAAC;QACD,yEAAyE;QACzE,qCAAqC;QACrC,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QAExB,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,IAAI,CAAC;gBACH,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,iDAAiD;YAC1E,CAAC;YAAC,MAAM,CAAC;gBACP,oEAAoE;YACtE,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;QACvC,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,CAAC;QACH,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACtB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,UAAU,GAAG,mBAAmB,EAAE,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;YAAE,SAAS;QAC9B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC/B,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,0DAA0D,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACtG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO;IACzC,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,8EAA8E;IAChF,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,UAAU,CAAC,OAAe;IACxC,MAAM,GAAG,GAAG;QACV,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,EAAE;QACzC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE;QACpC,OAAO;KACR,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,OAAe;IACrD,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,2BAA2B,GAAG,IAAI,CAAC;IAC5E,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;AACnC,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,OAAO,CAAC,GAAW,EAAE,OAAe;IAClD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AACjD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,UAAU,CAAC;AAEtC,2EAA2E;AAC3E,MAAM,UAAU,kBAAkB,CAAC,IAAuB;IACxD,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,aAAa;IAC3B,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IAC5C,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACnB,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,OAAO,CAAC;AAChD,CAAC"}