dsh-plugin-capabilities 0.1.0 → 0.1.2

package/lib/index.js

@@ -796,6 +796,52 @@ function sendJson(response, status, body) {
   response.end(payload);
 }
 
+// src/restart.ts
+import { spawn } from "node:child_process";
+import { openSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { dirname, resolve } from "node:path";
+function dshLaunch(argv = process.argv, execArgv = process.execArgv) {
+  const entry = argv[1];
+  if (entry !== void 0 && /[\\/](?:bin\.(?:js|ts)|dsh)$/.test(entry)) {
+    const abs = resolve(entry);
+    return { file: process.execPath, args: [...execArgv, abs, ...argv.slice(2)], cwd: dirname(abs), viaShell: false };
+  }
+  return { file: "dsh", args: [...argv.slice(2)], cwd: void 0, viaShell: process.platform === "win32" };
+}
+function scheduleRestart(launch) {
+  const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-").slice(0, 19);
+  const logOut = `${tmpdir()}${tmpdir().endsWith("/") ? "" : "\\"}dsh-plugin-capabilities-restart-${stamp}.out.log`;
+  const logErr = logOut.replace(".out.log", ".err.log");
+  const child = spawn(launch.file, launch.args, {
+    cwd: launch.cwd,
+    stdio: ["ignore", openSync(logOut, "a"), openSync(logErr, "a")],
+    env: process.env,
+    shell: launch.viaShell,
+    windowsHide: true
+  });
+  child.unref();
+  setTimeout(() => process.kill(process.pid, "SIGTERM"), 500);
+  return { pid: process.pid, replacementPid: child.pid, logOut, logErr };
+}
+function trustedRestartRequest(request, socketAddress) {
+  const address = socketAddress ?? (request.socket.remoteAddress ?? "");
+  if (address !== "127.0.0.1" && address !== "::1" && address !== "::ffff:127.0.0.1") return false;
+  if (request.headers.forwarded !== void 0 || request.headers["x-forwarded-for"] !== void 0 || request.headers["x-real-ip"] !== void 0) return false;
+  const origin = request.headers.origin;
+  const host = request.headers.host;
+  if (origin === void 0 || host === void 0) return false;
+  try {
+    const parsed = new URL(origin);
+    return (parsed.protocol === "http:" || parsed.protocol === "https:") && parsed.host === host;
+  } catch {
+    return false;
+  }
+}
+function restartOwnedByShell(env = process.env) {
+  return env.DSH_DESKTOP === "1";
+}
+
 // src/skills.ts
 import { existsSync as existsSync2, mkdirSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { homedir as homedir3 } from "node:os";
@@ -899,7 +945,8 @@ function listMcp(profileDirPath) {
 }
 function validateMcpInput(input) {
   if (!SERVER_NAME_RE.test(input.serverName)) return "serverName must be 1-32 chars of A-Z a-z 0-9 _ -";
-  if (input.id.includes("/") || input.id.includes("..")) return "invalid id";
+  const id = input.id ?? "";
+  if (id.includes("/") || id.includes("..")) return "invalid id";
   if (input.transport === "stdio") {
     if (input.command === void 0 || input.command.trim() === "") return "stdio transport requires a command";
   } else if (input.url === void 0 || !/^https?:\/\//.test(input.url)) {
@@ -908,10 +955,11 @@ function validateMcpInput(input) {
   return null;
 }
 function upsertMcp(profileDirPath, input) {
+  const inputId = input.id ?? "";
   const doc = loadPatch(profileDirPath);
   const seq = rowSeq(doc);
-  const existing = input.id !== "" ? mcpRows(doc).find((item) => item.get("id") === input.id) : void 0;
-  let id = input.id !== "" ? input.id : `mcp-${input.serverName}`;
+  const existing = inputId !== "" ? mcpRows(doc).find((item) => item.get("id") === inputId) : void 0;
+  let id = inputId !== "" ? inputId : `mcp-${input.serverName}`;
   if (existing === void 0) {
     const taken = new Set(
       (seq.items ?? []).map((item) => String(item.get("id") ?? "")).filter((id2) => id2 !== "")
@@ -1215,6 +1263,27 @@ function mountCapabilitiesRoutes(host, config) {
           sendJson(response, 500, { error: error instanceof Error ? error.message : String(error) });
         }
       }
+    }),
+    host.webServer.register({
+      kind: "exact",
+      path: "/dsh-plugin-capabilities/restart",
+      handler: (request, response) => {
+        if (request.method !== "POST") {
+          response.writeHead(405, { allow: "POST" });
+          response.end();
+          return;
+        }
+        if (!trustedRestartRequest(request)) {
+          sendJson(response, 403, { error: "untrusted origin" });
+          return;
+        }
+        if (restartOwnedByShell()) {
+          sendJson(response, 409, { error: "restart is owned by the desktop shell" });
+          return;
+        }
+        const { pid, replacementPid, logOut } = scheduleRestart(dshLaunch());
+        sendJson(response, 200, { ok: true, pid, replacementPid, logOut });
+      }
     })
   ];
   return () => {