machine-bridge-mcp 0.4.2 → 0.6.0

package/src/shared/tool-catalog.json

@@ -34,7 +34,7 @@
   {
     "name": "list_roots",
     "title": "List workspace roots",
-    "description": "List filesystem roots exposed by the local runtime. Paths are workspace-relative unless absolute-path output is explicitly enabled.",
+    "description": "List filesystem roots exposed by the active local policy. The default full profile exposes local filesystem roots and returns absolute paths.",
     "availability": "always",
     "annotations": {
       "readOnlyHint": true,
@@ -100,7 +100,7 @@
   {
     "name": "read_file",
     "title": "Read text file",
-    "description": "Read a UTF-8 file or an inclusive 1-based line range. Filesystem paths are workspace-scoped unless unrestricted paths are explicitly enabled.",
+    "description": "Read a UTF-8 regular file or an inclusive 1-based line range. The server does not block sensitive-looking filenames; access follows the active local policy and operating-system permissions.",
     "availability": "always",
     "annotations": {
       "readOnlyHint": true,
@@ -603,6 +603,504 @@
       "additionalProperties": false
     }
   },
+  {
+    "name": "diagnose_runtime",
+    "title": "Diagnose runtime layers",
+    "description": "Run fixed, non-user-controlled local probes to distinguish MCP policy, local filesystem, process-spawn, shell, managed-job storage, and registered-resource failures. A successful response proves the request reached the local daemon; it cannot diagnose a host refusal that blocks the tool call itself.",
+    "availability": "always",
+    "annotations": {
+      "readOnlyHint": true,
+      "destructiveHint": false,
+      "idempotentHint": true,
+      "openWorldHint": false
+    },
+    "inputSchema": {
+      "type": "object",
+      "additionalProperties": false
+    }
+  },
+  {
+    "name": "list_local_resources",
+    "title": "List local resource aliases",
+    "description": "List names and validation status for locally registered file resources without returning their paths or contents. Resources are registered only through the local machine-mcp CLI.",
+    "availability": "write",
+    "annotations": {
+      "readOnlyHint": true,
+      "destructiveHint": false,
+      "idempotentHint": true,
+      "openWorldHint": false
+    },
+    "inputSchema": {
+      "type": "object",
+      "additionalProperties": false
+    }
+  },
+  {
+    "name": "stage_job",
+    "title": "Stage managed job for local approval",
+    "description": "Validate and persist a managed-job plan without starting any process. Use this when execution tools are unavailable or local operator review is required; launch later with machine-mcp job approve JOB_ID.",
+    "availability": "write",
+    "annotations": {
+      "readOnlyHint": false,
+      "destructiveHint": false,
+      "idempotentHint": false,
+      "openWorldHint": false
+    },
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "name": {
+          "type": "string",
+          "maxLength": 128
+        },
+        "steps": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 16,
+          "items": {
+            "type": "object",
+            "properties": {
+              "name": {
+                "type": "string",
+                "maxLength": 128
+              },
+              "argv": {
+                "type": "array",
+                "minItems": 1,
+                "maxItems": 256,
+                "items": {
+                  "type": "string",
+                  "maxLength": 16384
+                }
+              },
+              "cwd": {
+                "type": "string",
+                "maxLength": 4096
+              },
+              "env": {
+                "type": "object",
+                "maxProperties": 64,
+                "additionalProperties": {
+                  "type": "string",
+                  "maxLength": 16384
+                }
+              },
+              "env_resources": {
+                "type": "object",
+                "maxProperties": 32,
+                "additionalProperties": {
+                  "type": "string",
+                  "pattern": "^[a-z][a-z0-9._-]{0,63}$"
+                }
+              },
+              "stdin": {
+                "type": "string",
+                "maxLength": 262144
+              },
+              "stdin_resource": {
+                "type": "string",
+                "pattern": "^[a-z][a-z0-9._-]{0,63}$"
+              },
+              "timeout_seconds": {
+                "type": "integer",
+                "minimum": 1,
+                "maximum": 3600,
+                "default": 600
+              },
+              "allow_failure": {
+                "type": "boolean",
+                "default": false
+              },
+              "capture_output": {
+                "type": "string",
+                "enum": [
+                  "redacted",
+                  "discard"
+                ],
+                "default": "redacted"
+              }
+            },
+            "required": [
+              "argv"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "finally_steps": {
+          "type": "array",
+          "maxItems": 16,
+          "items": {
+            "type": "object",
+            "properties": {
+              "name": {
+                "type": "string",
+                "maxLength": 128
+              },
+              "argv": {
+                "type": "array",
+                "minItems": 1,
+                "maxItems": 256,
+                "items": {
+                  "type": "string",
+                  "maxLength": 16384
+                }
+              },
+              "cwd": {
+                "type": "string",
+                "maxLength": 4096
+              },
+              "env": {
+                "type": "object",
+                "maxProperties": 64,
+                "additionalProperties": {
+                  "type": "string",
+                  "maxLength": 16384
+                }
+              },
+              "env_resources": {
+                "type": "object",
+                "maxProperties": 32,
+                "additionalProperties": {
+                  "type": "string",
+                  "pattern": "^[a-z][a-z0-9._-]{0,63}$"
+                }
+              },
+              "stdin": {
+                "type": "string",
+                "maxLength": 262144
+              },
+              "stdin_resource": {
+                "type": "string",
+                "pattern": "^[a-z][a-z0-9._-]{0,63}$"
+              },
+              "timeout_seconds": {
+                "type": "integer",
+                "minimum": 1,
+                "maximum": 3600,
+                "default": 600
+              },
+              "allow_failure": {
+                "type": "boolean",
+                "default": false
+              },
+              "capture_output": {
+                "type": "string",
+                "enum": [
+                  "redacted",
+                  "discard"
+                ],
+                "default": "redacted"
+              }
+            },
+            "required": [
+              "argv"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "temporary_files": {
+          "type": "array",
+          "maxItems": 16,
+          "items": {
+            "type": "object",
+            "properties": {
+              "name": {
+                "type": "string",
+                "pattern": "^[a-z][a-z0-9._-]{0,63}$"
+              },
+              "content": {
+                "type": "string",
+                "maxLength": 262144
+              },
+              "executable": {
+                "type": "boolean",
+                "default": false
+              }
+            },
+            "required": [
+              "name",
+              "content"
+            ],
+            "additionalProperties": false
+          }
+        }
+      },
+      "required": [
+        "steps"
+      ],
+      "additionalProperties": false
+    }
+  },
+  {
+    "name": "start_job",
+    "title": "Start managed job",
+    "description": "Durably accept a detached argv-based job with ordered steps, job-scoped temporary files, and guaranteed-attempt finally steps. The independent local runner continues if the MCP connection disappears. Use {{temp:name}}, {{resource:name}}, env_resources, or stdin_resource; registered resource contents never enter MCP arguments.",
+    "availability": "direct-exec",
+    "annotations": {
+      "readOnlyHint": false,
+      "destructiveHint": true,
+      "idempotentHint": false,
+      "openWorldHint": true
+    },
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "name": {
+          "type": "string",
+          "maxLength": 128
+        },
+        "steps": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 16,
+          "items": {
+            "type": "object",
+            "properties": {
+              "name": {
+                "type": "string",
+                "maxLength": 128
+              },
+              "argv": {
+                "type": "array",
+                "minItems": 1,
+                "maxItems": 256,
+                "items": {
+                  "type": "string",
+                  "maxLength": 16384
+                }
+              },
+              "cwd": {
+                "type": "string",
+                "maxLength": 4096
+              },
+              "env": {
+                "type": "object",
+                "maxProperties": 64,
+                "additionalProperties": {
+                  "type": "string",
+                  "maxLength": 16384
+                }
+              },
+              "env_resources": {
+                "type": "object",
+                "maxProperties": 32,
+                "additionalProperties": {
+                  "type": "string",
+                  "pattern": "^[a-z][a-z0-9._-]{0,63}$"
+                }
+              },
+              "stdin": {
+                "type": "string",
+                "maxLength": 262144
+              },
+              "stdin_resource": {
+                "type": "string",
+                "pattern": "^[a-z][a-z0-9._-]{0,63}$"
+              },
+              "timeout_seconds": {
+                "type": "integer",
+                "minimum": 1,
+                "maximum": 3600,
+                "default": 600
+              },
+              "allow_failure": {
+                "type": "boolean",
+                "default": false
+              },
+              "capture_output": {
+                "type": "string",
+                "enum": [
+                  "redacted",
+                  "discard"
+                ],
+                "default": "redacted"
+              }
+            },
+            "required": [
+              "argv"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "finally_steps": {
+          "type": "array",
+          "maxItems": 16,
+          "items": {
+            "type": "object",
+            "properties": {
+              "name": {
+                "type": "string",
+                "maxLength": 128
+              },
+              "argv": {
+                "type": "array",
+                "minItems": 1,
+                "maxItems": 256,
+                "items": {
+                  "type": "string",
+                  "maxLength": 16384
+                }
+              },
+              "cwd": {
+                "type": "string",
+                "maxLength": 4096
+              },
+              "env": {
+                "type": "object",
+                "maxProperties": 64,
+                "additionalProperties": {
+                  "type": "string",
+                  "maxLength": 16384
+                }
+              },
+              "env_resources": {
+                "type": "object",
+                "maxProperties": 32,
+                "additionalProperties": {
+                  "type": "string",
+                  "pattern": "^[a-z][a-z0-9._-]{0,63}$"
+                }
+              },
+              "stdin": {
+                "type": "string",
+                "maxLength": 262144
+              },
+              "stdin_resource": {
+                "type": "string",
+                "pattern": "^[a-z][a-z0-9._-]{0,63}$"
+              },
+              "timeout_seconds": {
+                "type": "integer",
+                "minimum": 1,
+                "maximum": 3600,
+                "default": 600
+              },
+              "allow_failure": {
+                "type": "boolean",
+                "default": false
+              },
+              "capture_output": {
+                "type": "string",
+                "enum": [
+                  "redacted",
+                  "discard"
+                ],
+                "default": "redacted"
+              }
+            },
+            "required": [
+              "argv"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "temporary_files": {
+          "type": "array",
+          "maxItems": 16,
+          "items": {
+            "type": "object",
+            "properties": {
+              "name": {
+                "type": "string",
+                "pattern": "^[a-z][a-z0-9._-]{0,63}$"
+              },
+              "content": {
+                "type": "string",
+                "maxLength": 262144
+              },
+              "executable": {
+                "type": "boolean",
+                "default": false
+              }
+            },
+            "required": [
+              "name",
+              "content"
+            ],
+            "additionalProperties": false
+          }
+        }
+      },
+      "required": [
+        "steps"
+      ],
+      "additionalProperties": false
+    }
+  },
+  {
+    "name": "list_jobs",
+    "title": "List managed jobs",
+    "description": "List recent detached managed jobs and their lifecycle status without returning step output.",
+    "availability": "write",
+    "annotations": {
+      "readOnlyHint": true,
+      "destructiveHint": false,
+      "idempotentHint": true,
+      "openWorldHint": false
+    },
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "limit": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 50,
+          "default": 20
+        }
+      },
+      "additionalProperties": false
+    }
+  },
+  {
+    "name": "read_job",
+    "title": "Read managed job",
+    "description": "Return one managed job status plus bounded, resource-redacted step results. Registered resource paths and contents are never returned.",
+    "availability": "direct-exec",
+    "annotations": {
+      "readOnlyHint": true,
+      "destructiveHint": false,
+      "idempotentHint": true,
+      "openWorldHint": false
+    },
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "job_id": {
+          "type": "string",
+          "pattern": "^job_[A-Za-z0-9_-]{24,}$"
+        }
+      },
+      "required": [
+        "job_id"
+      ],
+      "additionalProperties": false
+    }
+  },
+  {
+    "name": "cancel_job",
+    "title": "Cancel managed job",
+    "description": "Request cancellation of a detached managed job. The runner terminates the active process tree and still attempts declared finally steps and local resource cleanup.",
+    "availability": "write",
+    "annotations": {
+      "readOnlyHint": false,
+      "destructiveHint": true,
+      "idempotentHint": true,
+      "openWorldHint": true
+    },
+    "inputSchema": {
+      "type": "object",
+      "properties": {
+        "job_id": {
+          "type": "string",
+          "pattern": "^job_[A-Za-z0-9_-]{24,}$"
+        }
+      },
+      "required": [
+        "job_id"
+      ],
+      "additionalProperties": false
+    }
+  },
   {
     "name": "exec_command",
     "title": "Execute shell command",

package/src/worker/index.ts

@@ -1,10 +1,11 @@
 import { DurableObject } from "cloudflare:workers";
 import toolCatalog from "../shared/tool-catalog.json";
+import serverMetadata from "../shared/server-metadata.json";
 
-const SERVER_NAME = "machine-bridge-mcp";
-const SERVER_VERSION = "0.4.2";
-const MCP_PROTOCOL_VERSION = "2025-11-25";
-const MCP_SUPPORTED_PROTOCOL_VERSIONS = ["2025-11-25", "2025-06-18", "2025-03-26"] as const;
+const SERVER_NAME = String(serverMetadata.name);
+const SERVER_VERSION = "0.6.0";
+const MCP_PROTOCOL_VERSION = String(serverMetadata.protocolVersion);
+const MCP_SUPPORTED_PROTOCOL_VERSIONS = serverMetadata.supportedProtocolVersions.map((value) => String(value));
 const JSONRPC_VERSION = "2.0";
 const DEFAULT_MAX_BODY_BYTES = 8 * 1024 * 1024;
 const MAX_BODY_BYTES = 16 * 1024 * 1024;
@@ -121,13 +122,8 @@ const allCatalogTools = toolCatalog as ToolDefinition[];
 const serverInfoTool = publicTool(allCatalogTools.find((tool) => tool.name === "server_info")!);
 const workspaceTools = allCatalogTools.filter((tool) => tool.name !== "server_info").map(publicTool);
 
-const MCP_INSTRUCTIONS = [
-  "You are connected to a local workspace through machine-bridge-mcp.",
-  "The Cloudflare Worker authenticates and relays calls; file and command operations execute on the user's local runtime.",
-  "Relative paths use the configured workspace. Direct filesystem tools are workspace-scoped unless unrestricted paths are explicitly enabled.",
-  "run_process avoids shell parsing but is not an OS sandbox. exec_command is only exposed in shell mode and has the local user's authority.",
-  "Prefer read_file line ranges, edit_file, or apply_patch over whole-file replacement, and report commands that were run.",
-].join("\n");
+const MCP_INSTRUCTIONS = serverMetadata.instructions.map((value) => String(value)).join("\n");
+
 
 function publicTool(tool: ToolDefinition): ToolDefinition {
   const { availability: _availability, ...definition } = tool;
@@ -1001,8 +997,14 @@ function daemonPolicyAllows(availability: unknown, policy: Record<string, unknow
 function sanitizeDaemonPolicy(value: unknown): Record<string, unknown> {
   const policy = asObject(value);
   const execMode = policy.execMode === "shell" || policy.execMode === "direct" ? policy.execMode : "off";
+  const origin = sanitizeMetadataText(policy.origin, 32);
+  const revision = Number.isInteger(policy.revision) && Number(policy.revision) > 0
+    ? Math.min(Number(policy.revision), 1_000_000)
+    : 1;
   return {
     profile: sanitizeMetadataText(policy.profile, 32) ?? "custom",
+    origin: ["default", "explicit", "custom", "migrated", "legacy-preserved"].includes(origin ?? "") ? origin : "custom",
+    revision,
     allowWrite: policy.allowWrite === true,
     allowExec: execMode !== "off",
     execMode,