droid-mode 0.0.8 → 0.0.10

package/README.md

@@ -67,10 +67,14 @@ Droid Mode eliminates schema overhead by keeping tool definitions out of the LLM
 
 | Metric | Native MCP | Droid Mode |
 |--------|------------|------------|
-| Schema overhead (3 tools) | 329 tokens | **0 tokens** |
+| Schema overhead (3 tools used) | 329 tokens | **0 tokens** |
+| Full server loaded (22 tools) | 2,400 tokens | **0 tokens** |
+| Typical setup (5 servers, ~100 tools) | ~11,000 tokens | **0 tokens** |
 | Total tokens (3-tool session) | 1,072 | **897** |
 | **Savings** | — | **16%** |
 
+Industry reports show MCP tools consuming 20-30% of context windows before any work begins. With Droid Mode, that overhead drops to zero — tools are loaded only when called.
+
 Schema cost scales with tool count:
 
 | Tools Enabled | Native MCP Cost | Droid Mode Cost |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "droid-mode",
-  "version": "0.0.8",
+  "version": "0.0.10",
   "description": "Progressive Code-Mode MCP integration for Factory.ai Droid - access MCP tools without context bloat",
   "type": "module",
   "main": "dist/cli.js",

package/templates/skills/droid-mode/lib/hydrate.mjs

@@ -1,6 +1,6 @@
 import path from "node:path";
 import fs from "node:fs";
-import { ensureDir, nowIsoCompact, safeIdentifier, writeJson, getDroidModeDataDir } from "./util.mjs";
+import { ensureDir, nowIsoCompact, safeIdentifier, writeJson, getDroidModeDataDir, serverNameToDirName } from "./util.mjs";
 
 /** @param {string} s */
 function toPascalCase(s) {
@@ -89,9 +89,10 @@ function schemaToTs(schema, depth = 0) {
  */
 export function hydrateTools(opts) {
   const ts = nowIsoCompact();
+  const serverDir = serverNameToDirName(opts.serverName);
   const baseOut =
     opts.outDir ||
-    path.join(getDroidModeDataDir(), "hydrated", opts.serverName, ts);
+    path.join(getDroidModeDataDir(), "hydrated", serverDir, ts);
 
   ensureDir(baseOut);
 

package/templates/skills/droid-mode/lib/run.mjs

@@ -1,7 +1,7 @@
 import fs from "node:fs";
 import path from "node:path";
 import vm from "node:vm";
-import { nowIsoCompact, sha256Hex, safeIdentifier, ensureDir, getDroidModeDataDir, writeJson } from "./util.mjs";
+import { nowIsoCompact, sha256Hex, safeIdentifier, ensureDir, getDroidModeDataDir, writeJson, serverNameToDirName } from "./util.mjs";
 
 /**
  * Static, best-effort disallow list for sandboxed workflows.
@@ -200,10 +200,12 @@ export async function executeWorkflow(opts) {
 export function writeRunArtifact(opts) {
   const dataDir = getDroidModeDataDir();
   const ts = nowIsoCompact();
-  const outDir = path.join(dataDir, "runs", opts.serverName, ts);
+  const serverDir = serverNameToDirName(opts.serverName);
+  const outDir = path.join(dataDir, "runs", serverDir, ts);
   ensureDir(outDir);
   const payload = {
     serverName: opts.serverName,
+    serverDir,
     workflowPath: opts.workflowPath,
     tools: opts.tools,
     finishedAt: new Date().toISOString(),

package/templates/skills/droid-mode/lib/tool_index.mjs

@@ -1,5 +1,5 @@
 import path from "node:path";
-import { getDroidModeDataDir, readJsonFileIfExists, writeJson } from "./util.mjs";
+import { getDroidModeDataDir, readJsonFileIfExists, writeJson, serverNameToDirName } from "./util.mjs";
 
 /**
  * @param {import("./mcp_client.mjs").McpClient} client
@@ -27,7 +27,8 @@ export async function fetchAllTools(client) {
  */
 export async function getToolsCached(opts) {
   const dataDir = getDroidModeDataDir();
-  const cacheFile = path.join(dataDir, "cache", opts.serverName, "tools.json");
+  const serverDir = serverNameToDirName(opts.serverName);
+  const cacheFile = path.join(dataDir, "cache", serverDir, "tools.json");
   const maxAgeMs = typeof opts.maxAgeMs === "number" ? opts.maxAgeMs : 30 * 60 * 1000; // 30 minutes
 
   if (!opts.refresh) {
@@ -46,6 +47,7 @@ export async function getToolsCached(opts) {
   const payload = {
     fetchedAt: new Date().toISOString(),
     serverName: opts.serverName,
+    serverDir,
     protocolVersion: opts.client.negotiatedProtocolVersion,
     serverInfo: opts.client.serverInfo,
     capabilities: opts.client.serverCapabilities,

package/templates/skills/droid-mode/lib/util.mjs

@@ -17,6 +17,25 @@ export function sha256Hex(s) {
   return crypto.createHash("sha256").update(s).digest("hex");
 }
 
+/**
+ * Convert an arbitrary server name into a safe directory segment.
+ * Always sanitizes and appends hash suffix for safety.
+ * @param {string} serverName
+ * @returns {string}
+ */
+export function serverNameToDirName(serverName) {
+  const raw = String(serverName ?? "");
+  const hash = sha256Hex(raw).slice(0, 8);
+  const base = raw
+    .replace(/[/\\]/g, "_")           // block path separators
+    .replace(/\.\./g, "_")            // block traversal
+    .replace(/[^a-zA-Z0-9._-]/g, "_") // whitelist safe chars
+    .replace(/^\.+/g, "")             // avoid dotfiles
+    .slice(0, 40);
+
+  return `${base || "server"}-${hash}`;
+}
+
 /**
  * Convert a tool name (often snake_case or kebab-case) to a safe camelCase identifier.
  * @param {string} toolName