deepseek-pp-shell-host 0.6.3 → 0.6.4

package/native/shell-mcp-host.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { execFileSync, spawn } from 'node:child_process';
-import { dirname, resolve } from 'node:path';
+import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import {
   arch,
@@ -8,10 +8,11 @@ import {
   hostname,
   platform,
   release as osRelease,
+  tmpdir,
   type as osType,
   version as osVersion,
 } from 'node:os';
-import { existsSync } from 'node:fs';
+import { existsSync, mkdtempSync, readdirSync, rmSync } from 'node:fs';
 
 // Resolve package root from this script's location (native/ -> package root).
 const __dirname = dirname(fileURLToPath(import.meta.url));
@@ -32,8 +33,15 @@ const userBinDirs = platform() === 'win32'
   ? [resolve(localAppData, 'OfficeCLI')]
   : [
       resolve(homedir(), '.local', 'bin'),
+      resolve(homedir(), '.pyenv', 'shims'),
+      resolve(homedir(), 'miniconda3', 'bin'),
+      resolve(homedir(), 'anaconda3', 'bin'),
+      resolve(homedir(), 'miniforge3', 'bin'),
+      resolve(homedir(), 'mambaforge', 'bin'),
       '/opt/homebrew/bin',
       '/usr/local/bin',
+      '/usr/bin',
+      '/bin',
     ];
 const managedPathDirs = new Set([nodeBinDir, ...localBinDirs, ...userBinDirs]);
 const existingPathDirs = splitPath(currentPath).filter(d => !managedPathDirs.has(d));
@@ -49,6 +57,11 @@ setEnvironmentPath(process.env, hostPath);
 const MCP_PROTOCOL_VERSION = '2025-06-18';
 const DEFAULT_TIMEOUT_MS = 120_000;
 const MAX_OUTPUT_BYTES = 128_000;
+const DEFAULT_PYTHON_TIMEOUT_MS = 10_000;
+const MAX_PYTHON_TIMEOUT_MS = 30_000;
+const MAX_PYTHON_CODE_BYTES = 60_000;
+const MAX_PYTHON_OUTPUT_BYTES = 64_000;
+const PYTHON_PACKAGE_CHECKS = ['numpy', 'pandas', 'sympy'];
 const DEFAULT_SHELL = platform() === 'win32' ? 'powershell.exe' : process.env.SHELL || '/bin/sh';
 const WINDOWS_POWERSHELL_UTF8_PREAMBLE = [
   '[Console]::InputEncoding = [System.Text.UTF8Encoding]::new($false)',
@@ -82,6 +95,28 @@ const TOOL_DEFINITIONS = [
     inputSchema: { type: 'object', properties: {}, additionalProperties: false },
     annotations: { operation: 'read', risk: 'low' },
   },
+  {
+    name: 'python_status',
+    title: 'Python Interpreter Status',
+    description: 'Report whether a local Python interpreter is available and which quick-validation packages can be imported.',
+    inputSchema: { type: 'object', properties: {}, additionalProperties: false },
+    annotations: { operation: 'read', risk: 'low' },
+  },
+  {
+    name: 'python_exec',
+    title: 'Execute Python Code',
+    description: 'Run short Python code for calculation, reasoning checks, and small data transformations. Do not install packages, access sensitive local files, or use network access.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        code: { type: 'string', description: 'Short Python code to execute. Keep it focused on computation or validation.' },
+        timeout_ms: { type: 'integer', minimum: 1000, maximum: MAX_PYTHON_TIMEOUT_MS, description: 'Timeout in milliseconds. Default 10000.' },
+      },
+      required: ['code'],
+      additionalProperties: false,
+    },
+    annotations: { operation: 'execute', risk: 'high' },
+  },
 ];
 
 // --- Native messaging framing (4-byte LE length prefix) ---
@@ -176,7 +211,7 @@ function handleInitialize(id) {
     protocolVersion: MCP_PROTOCOL_VERSION,
     capabilities: { tools: {} },
     serverInfo: { name: 'deepseek-pp-shell', version: '1.0.0' },
-    instructions: 'General-purpose shell execution host. Use shell_exec to run any command on the local system.',
+    instructions: 'General-purpose shell execution host. Use shell_exec for local commands and python_exec only for short computation or validation snippets.',
   });
 }
 
@@ -244,6 +279,14 @@ async function handleCallTool(id, params) {
     }
   }
 
+  if (name === 'python_status') {
+    return jsonRpcResult(id, await createPythonStatusResult());
+  }
+
+  if (name === 'python_exec') {
+    return jsonRpcResult(id, await executePythonTool(args));
+  }
+
   return jsonRpcError(id, -32602, `Unknown tool: ${name}`);
 }
 
@@ -310,6 +353,412 @@ function execCommand(command, { cwd, env, timeoutMs }) {
   });
 }
 
+async function createPythonStatusResult() {
+  const status = await detectPythonStatus();
+  const text = status.available
+    ? `Python ${status.version} ready at ${status.executable}`
+    : 'No local Python interpreter found. Tried environment variables, common paths, and python/python3/py --version.';
+
+  return {
+    content: [{ type: 'text', text }],
+    structuredContent: {
+      ok: true,
+      data: status,
+    },
+  };
+}
+
+async function executePythonTool(args) {
+  const code = args?.code;
+  if (typeof code !== 'string' || code.trim().length === 0) {
+    return {
+      isError: true,
+      content: [{ type: 'text', text: 'code is required and must be a non-empty string.' }],
+    };
+  }
+
+  const codeBytes = Buffer.byteLength(code, 'utf8');
+  if (codeBytes > MAX_PYTHON_CODE_BYTES) {
+    return {
+      isError: true,
+      content: [{ type: 'text', text: `code exceeds ${MAX_PYTHON_CODE_BYTES} bytes.` }],
+    };
+  }
+
+  const timeoutMs = typeof args.timeout_ms === 'number' && args.timeout_ms >= 1000
+    ? Math.min(Math.floor(args.timeout_ms), MAX_PYTHON_TIMEOUT_MS)
+    : DEFAULT_PYTHON_TIMEOUT_MS;
+  const status = await detectPythonStatus();
+
+  if (!status.available || !status.command) {
+    return {
+      isError: true,
+      content: [{ type: 'text', text: 'No local Python interpreter found. Tried environment variables, common paths, and python/python3/py --version.' }],
+      structuredContent: {
+        ok: false,
+        data: status,
+      },
+    };
+  }
+
+  const cwd = mkdtempSync(join(tmpdir(), 'deepseek-pp-python-'));
+  try {
+    const result = await execPythonProcess(status.command, status.commandArgs ?? [], {
+      code,
+      cwd,
+      timeoutMs,
+    });
+    return {
+      content: [{ type: 'text', text: formatPythonExecSummary(result) }],
+      structuredContent: {
+        ok: result.exitCode === 0,
+        data: {
+          ...result,
+          pythonPath: status.executable,
+          pythonVersion: status.version,
+          cwd: '(temporary scratch directory)',
+          limits: getPythonLimits(),
+        },
+      },
+      isError: result.exitCode !== 0,
+    };
+  } catch (err) {
+    return {
+      isError: true,
+      content: [{ type: 'text', text: err.message }],
+    };
+  } finally {
+    rmSync(cwd, { recursive: true, force: true });
+  }
+}
+
+async function detectPythonStatus() {
+  const candidates = getPythonCandidates();
+  const candidateLabels = candidates.map(formatPythonCandidate);
+
+  for (const candidate of candidates) {
+    let versionText = null;
+    try {
+      const versionProbe = await execPythonVersionProbe(candidate);
+      versionText = parsePythonVersionOutput(versionProbe);
+      if (versionProbe.exitCode !== 0 || !versionText) continue;
+    } catch {
+      // Try the next environment value, path, or command name.
+      continue;
+    }
+
+    try {
+      const probe = await execPythonProbe(candidate);
+      if (probe.exitCode !== 0 || !probe.stdout.trim()) continue;
+      const data = JSON.parse(probe.stdout.trim());
+      return {
+        available: true,
+        command: candidate.command,
+        commandArgs: getPythonCommandArgs(candidate),
+        executable: typeof data.executable === 'string' ? data.executable : candidate.command,
+        version: typeof data.version === 'string' ? data.version : versionText,
+        versionCheck: versionText,
+        packages: normalizePythonPackages(data.packages),
+        candidates: candidateLabels,
+        isolation: 'python -I',
+        policy: getPythonPolicy(),
+        limits: getPythonLimits(),
+      };
+    } catch {
+      // --version worked, but the JSON probe failed; try the next common executable name.
+    }
+  }
+
+  return {
+    available: false,
+    command: null,
+    commandArgs: [],
+    executable: null,
+    version: null,
+    versionCheck: null,
+    packages: Object.fromEntries(PYTHON_PACKAGE_CHECKS.map((name) => [name, false])),
+    candidates: candidateLabels,
+    isolation: 'python -I',
+    policy: getPythonPolicy(),
+    limits: getPythonLimits(),
+  };
+}
+
+function getPythonCandidates() {
+  const envCandidates = getPythonEnvCandidates();
+  const pathCandidates = getPythonPathCandidates();
+  const fallbackCandidates = platform() === 'win32'
+    ? [
+        { command: 'py', args: [], launcherArgs: ['-3'], source: 'command:py -3 --version' },
+        { command: 'py.exe', args: [], launcherArgs: ['-3'], source: 'command:py.exe -3 --version' },
+        { command: 'python', args: [], source: 'command:python --version' },
+        { command: 'python.exe', args: [], source: 'command:python.exe --version' },
+        { command: 'python3', args: [], source: 'command:python3 --version' },
+        { command: 'python3.exe', args: [], source: 'command:python3.exe --version' },
+      ]
+    : [
+        { command: 'python3', args: [], source: 'command:python3 --version' },
+        { command: 'python', args: [], source: 'command:python --version' },
+        { command: 'py', args: [], source: 'command:py --version' },
+      ];
+  return dedupePythonCandidates([...envCandidates, ...pathCandidates, ...fallbackCandidates]);
+}
+
+function getPythonEnvCandidates() {
+  const names = [
+    'DEEPSEEK_PP_PYTHON',
+    'PYTHON_EXECUTABLE',
+    'PYTHON',
+    'PYTHON3',
+  ];
+  const candidates = [];
+  for (const name of names) {
+    const value = process.env[name];
+    if (typeof value !== 'string' || value.trim().length === 0) continue;
+    candidates.push({ command: value.trim(), args: [], source: 'env:' + name });
+  }
+  return candidates;
+}
+
+function getPythonPathCandidates() {
+  return platform() === 'win32' ? getWindowsPythonPathCandidates() : getPosixPythonPathCandidates();
+}
+
+function getPosixPythonPathCandidates() {
+  const candidates = [];
+  const directPaths = [
+    resolve(homedir(), '.pyenv', 'shims', 'python3'),
+    resolve(homedir(), '.pyenv', 'shims', 'python'),
+    resolve(homedir(), 'miniconda3', 'bin', 'python'),
+    resolve(homedir(), 'anaconda3', 'bin', 'python'),
+    resolve(homedir(), 'miniforge3', 'bin', 'python'),
+    resolve(homedir(), 'mambaforge', 'bin', 'python'),
+    '/opt/homebrew/bin/python3',
+    '/opt/homebrew/bin/python',
+    '/usr/local/bin/python3',
+    '/usr/local/bin/python',
+    '/usr/bin/python3',
+    '/usr/bin/python',
+    '/bin/python3',
+    '/bin/python',
+  ];
+  for (const pythonPath of directPaths) addPythonPathCandidate(candidates, pythonPath, 'path:file');
+  for (const root of ['miniconda3', 'anaconda3', 'miniforge3', 'mambaforge']) {
+    addPythonEnvDirCandidates(candidates, resolve(homedir(), root, 'envs'));
+  }
+  addPythonEnvDirCandidates(candidates, resolve(homedir(), '.pyenv', 'versions'));
+  return candidates;
+}
+
+function getWindowsPythonPathCandidates() {
+  const candidates = [];
+  const dirs = [
+    resolve(localAppData, 'Programs', 'Python'),
+    process.env.ProgramFiles ? resolve(process.env.ProgramFiles) : '',
+    process.env['ProgramFiles(x86)'] ? resolve(process.env['ProgramFiles(x86)']) : '',
+  ].filter(Boolean);
+  addPythonPathCandidate(candidates, resolve(localAppData, 'Microsoft', 'WindowsApps', 'python.exe'), 'path:file');
+  for (const dir of dirs) {
+    for (const entry of readDirectoryEntries(dir)) {
+      if (!/^Python\d+/i.test(entry.name)) continue;
+      addPythonPathCandidate(candidates, resolve(dir, entry.name, 'python.exe'), 'path:file');
+    }
+  }
+  return candidates;
+}
+
+function addPythonEnvDirCandidates(candidates, envsDir) {
+  for (const entry of readDirectoryEntries(envsDir)) {
+    if (!entry.isDirectory()) continue;
+    const pythonPath = platform() === 'win32'
+      ? resolve(envsDir, entry.name, 'python.exe')
+      : resolve(envsDir, entry.name, 'bin', 'python');
+    addPythonPathCandidate(candidates, pythonPath, 'path:env');
+  }
+}
+
+function addPythonPathCandidate(candidates, pythonPath, source) {
+  if (!existsSync(pythonPath)) return;
+  candidates.push({ command: pythonPath, args: [], source });
+}
+
+function readDirectoryEntries(dir) {
+  try {
+    return readdirSync(dir, { withFileTypes: true });
+  } catch {
+    return [];
+  }
+}
+function dedupePythonCandidates(candidates) {
+  const seen = new Set();
+  const result = [];
+  for (const candidate of candidates) {
+    const key = [candidate.command, ...(candidate.launcherArgs ?? []), ...candidate.args].join('\0');
+    if (seen.has(key)) continue;
+    seen.add(key);
+    result.push(candidate);
+  }
+  return result;
+}
+
+function getPythonCommandArgs(candidate) {
+  return [...(candidate.launcherArgs ?? []), ...candidate.args];
+}
+
+function formatPythonCandidate(candidate) {
+  const label = [candidate.command, ...getPythonCommandArgs(candidate)].join(' ');
+  return candidate.source ? label + ' (' + candidate.source + ')' : label;
+}
+
+function execPythonVersionProbe(candidate) {
+  return execProcess(candidate.command, [...getPythonCommandArgs(candidate), '--version'], {
+    cwd: homedir(),
+    env: createPythonChildEnv(),
+    timeoutMs: 2_000,
+    maxOutputBytes: 2_000,
+  });
+}
+
+function parsePythonVersionOutput(probe) {
+  const text = [probe.stdout, probe.stderr].join(' ').replace(/\s+/g, ' ').trim();
+  const match = text.match(/Python\s+([0-9]+(?:\.[0-9]+){1,2})/i);
+  return match ? match[1] : null;
+}
+
+function execPythonProbe(candidate) {
+  const code = [
+    'import importlib.util, json, sys',
+    `packages = {name: importlib.util.find_spec(name) is not None for name in ${JSON.stringify(PYTHON_PACKAGE_CHECKS)}}`,
+    'print(json.dumps({"executable": sys.executable, "version": sys.version.split()[0], "packages": packages}, ensure_ascii=False))',
+  ].join('\n');
+
+  return execProcess(candidate.command, [...getPythonCommandArgs(candidate), '-I', '-c', code], {
+    cwd: homedir(),
+    env: createPythonChildEnv(),
+    timeoutMs: 5_000,
+    maxOutputBytes: 16_000,
+  });
+}
+
+function execPythonProcess(command, commandArgs, { code, cwd, timeoutMs }) {
+  return execProcess(command, [...commandArgs, '-I', '-'], {
+    cwd,
+    env: createPythonChildEnv(),
+    input: code,
+    timeoutMs,
+    maxOutputBytes: MAX_PYTHON_OUTPUT_BYTES,
+  });
+}
+
+function execProcess(command, args, { cwd, env, input, timeoutMs, maxOutputBytes }) {
+  return new Promise((resolve, reject) => {
+    const startedAt = Date.now();
+    const child = spawn(command, args, {
+      cwd,
+      env,
+      shell: false,
+      stdio: ['pipe', 'pipe', 'pipe'],
+      windowsHide: true,
+    });
+
+    const stdout = [];
+    const stderr = [];
+    let stdoutBytes = 0;
+    let stderrBytes = 0;
+    let timedOut = false;
+
+    const timer = setTimeout(() => {
+      timedOut = true;
+      child.kill('SIGTERM');
+      setTimeout(() => child.kill('SIGKILL'), 3000);
+    }, timeoutMs);
+
+    child.stdout.on('data', (chunk) => {
+      if (stdoutBytes < maxOutputBytes) {
+        const remaining = maxOutputBytes - stdoutBytes;
+        stdout.push(chunk.length <= remaining ? chunk : chunk.subarray(0, remaining));
+      }
+      stdoutBytes += chunk.length;
+    });
+
+    child.stderr.on('data', (chunk) => {
+      if (stderrBytes < maxOutputBytes) {
+        const remaining = maxOutputBytes - stderrBytes;
+        stderr.push(chunk.length <= remaining ? chunk : chunk.subarray(0, remaining));
+      }
+      stderrBytes += chunk.length;
+    });
+
+    child.on('error', (err) => {
+      clearTimeout(timer);
+      reject(new Error(`Failed to spawn ${command}: ${err.message}`));
+    });
+
+    child.on('close', (exitCode, signal) => {
+      clearTimeout(timer);
+      resolve({
+        command: [command, ...args].join(' '),
+        exitCode: timedOut ? -1 : (exitCode ?? -1),
+        signal: signal || (timedOut ? 'SIGTERM' : null),
+        stdout: Buffer.concat(stdout).toString('utf8'),
+        stderr: Buffer.concat(stderr).toString('utf8'),
+        truncated: stdoutBytes > maxOutputBytes || stderrBytes > maxOutputBytes,
+        timedOut,
+        durationMs: Date.now() - startedAt,
+      });
+    });
+
+    if (input != null) {
+      child.stdin.end(input);
+    } else {
+      child.stdin.end();
+    }
+  });
+}
+
+function createPythonChildEnv() {
+  const env = {};
+  const keys = platform() === 'win32'
+    ? ['SystemRoot', 'WINDIR', 'COMSPEC', 'PATHEXT', 'TEMP', 'TMP', 'USERPROFILE', 'LOCALAPPDATA', 'APPDATA']
+    : ['HOME', 'TMPDIR', 'TEMP', 'TMP', 'LANG', 'LC_ALL', 'LC_CTYPE'];
+
+  for (const key of keys) {
+    if (typeof process.env[key] === 'string') env[key] = process.env[key];
+  }
+
+  setEnvironmentPath(env, getEnvironmentPath(process.env));
+  env.PYTHONUTF8 = '1';
+  env.PYTHONIOENCODING = 'utf-8';
+  env.PYTHONNOUSERSITE = '1';
+  env.PIP_DISABLE_PIP_VERSION_CHECK = '1';
+  return env;
+}
+
+function normalizePythonPackages(value) {
+  const input = value && typeof value === 'object' ? value : {};
+  return Object.fromEntries(
+    PYTHON_PACKAGE_CHECKS.map((name) => [name, input[name] === true]),
+  );
+}
+
+function getPythonPolicy() {
+  return {
+    purpose: 'short computation, idea validation, and small data transformations',
+    packageInstall: false,
+    networkAccess: 'not_allowed_by_policy_not_os_enforced',
+    filesystemAccess: 'temporary_cwd_only_by_policy_not_os_enforced',
+  };
+}
+
+function getPythonLimits() {
+  return {
+    timeoutMsDefault: DEFAULT_PYTHON_TIMEOUT_MS,
+    timeoutMsMax: MAX_PYTHON_TIMEOUT_MS,
+    codeBytesMax: MAX_PYTHON_CODE_BYTES,
+    outputBytesMax: MAX_PYTHON_OUTPUT_BYTES,
+  };
+}
+
 function createChildEnv(extraEnv) {
   const explicitPath = getExplicitPathOverride(extraEnv);
   const env = extraEnv && typeof extraEnv === 'object' ? { ...process.env, ...extraEnv } : { ...process.env };
@@ -433,6 +882,16 @@ function formatExecSummary(result) {
   return parts.join('\n') || '(no output)';
 }
 
+function formatPythonExecSummary(result) {
+  const parts = [];
+  if (result.timedOut) parts.push('[TIMED OUT]');
+  if (result.exitCode !== 0) parts.push(`[exit ${result.exitCode}]`);
+  if (result.truncated) parts.push('[output truncated]');
+  if (result.stdout) parts.push(result.stdout.slice(0, 4000));
+  if (result.stderr) parts.push(`STDERR: ${result.stderr.slice(0, 2000)}`);
+  return parts.join('\n') || '(no output)';
+}
+
 // --- Message dispatch ---
 
 async function handleMessage(envelope) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deepseek-pp-shell-host",
-  "version": "0.6.3",
+  "version": "0.6.4",
   "description": "Native Messaging Shell MCP host installer for DeepSeek++",
   "type": "module",
   "private": false,