machine-bridge-mcp 1.2.5 → 1.2.7

package/src/local/runtime-reporting.mjs

@@ -3,6 +3,7 @@ import {
   allToolNames, isCanonicalFullPolicy, MCP_PROTOCOL_VERSION, MCP_SUPPORTED_PROTOCOL_VERSIONS,
   POLICY_PROFILES, SERVER_NAME,
 } from "./tools.mjs";
+import { executionGuardrailsSnapshot } from "./execution-limits.mjs";
 
 export function buildRuntimeInfo({
   workspace,
@@ -47,7 +48,7 @@ export function buildRuntimeInfo({
     },
     tools: ["server_info", ...toolNames],
     observability: {
-      relay_readiness: "authenticated-hello-acknowledged",
+      relay_readiness: "end-to-end-relay-probe-verified",
       brief_relay_interruptions: "debug-only",
       raw_transport_details: "debug-only",
       per_tool_events: "structured-debug-events",
@@ -63,6 +64,7 @@ export function buildRuntimeInfo({
       relay: relayStatus(),
       runtime_dir: policy.exposeAbsolutePaths ? runtimeDir : "<private-runtime-dir>",
       processes: processTracker.snapshot(),
+      execution_guardrails: executionGuardrailsSnapshot(),
       process_sessions: processSessionManager.status(),
       managed_jobs: managedJobManager.status(),
       local_resources: managedJobManager.resourceInfo(),

package/src/local/runtime.mjs

@@ -2,9 +2,10 @@ import { mkdirSync, mkdtempSync, realpathSync, rmSync } from "node:fs";
 import { lstat, realpath, stat } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
-import { RelayConnection } from "./relay-connection.mjs";
+import { isRelayReadyContext, RelayConnection } from "./relay-connection.mjs";
 import { ProcessSessionManager } from "./process-sessions.mjs";
-export { MAX_COMMAND_BYTES } from "./process-sessions.mjs";
+import { MAX_CONCURRENT_TOOL_CALLS } from "./execution-limits.mjs";
+export { MAX_COMMAND_BYTES } from "./process-contract.mjs";
 import { MCP_SUPPORTED_PROTOCOL_VERSIONS, normalizePolicy, PolicyGate, SERVER_NAME } from "./tools.mjs";
 import { publicError } from "./errors.mjs";
 import { ProcessTracker } from "./process-tracker.mjs";
@@ -36,7 +37,6 @@ import {
 } from "./runtime-capabilities.mjs";
 
 const MAX_WS_MESSAGE_BYTES = 8 * 1024 * 1024;
-const MAX_CONCURRENT_TOOL_CALLS = 16;
 const SLOW_TOOL_CALL_MS = 30_000;
 
 const RUNTIME_TOOL_HANDLERS = Object.freeze({
@@ -212,6 +212,7 @@ export class LocalRuntime {
       readResourceText,
       readResourceBinary,
       throwIfCancelled: (context) => this.throwIfCancelled(context),
+      logger: this.logger,
     });
     this.toolExecutor = new ToolExecutor({
       handlers: Object.fromEntries(Object.entries(RUNTIME_TOOL_HANDLERS).map(([name, handler]) => [
@@ -234,9 +235,7 @@ export class LocalRuntime {
     });
   }
 
-  tools() {
-    return this.policyGate.names().filter((name) => name !== "server_info");
-  }
+  tools() { return this.policyGate.names().filter((name) => name !== "server_info"); }
 
   runtimeInfo() {
     return buildRuntimeInfo({
@@ -303,12 +302,12 @@ export class LocalRuntime {
     }
     if (this.handleRelayControlMessage(message)) return;
     if (message.type === "relay_probe") {
-      if (relayContext.ready === true) return this.handleRelayProtocolViolation("unexpected_relay_probe");
+      if (isRelayReadyContext(relayContext, this.relay)) return this.handleRelayProtocolViolation("unexpected_relay_probe");
       this.handleRelayProbe(message, relayContext);
       return;
     }
     if (message.type !== "tool_call") return this.handleRelayProtocolViolation("unexpected_server_message_type");
-    if (relayContext.ready !== true) return this.handleRelayProtocolViolation("tool_call_before_ready");
+    if (!isRelayReadyContext(relayContext, this.relay)) return this.handleRelayProtocolViolation("tool_call_before_ready");
     await this.handleRelayToolCall(message, relayContext);
   }
 
@@ -742,6 +741,7 @@ function createRelayConnection(runtime, { workerUrl, secret, expectedVersion, on
   });
 }
 
+
 function handleRelayData(runtime, data, relayContext = {}) {
   const raw = typeof data === "string" ? data : Buffer.from(data).toString("utf8");
   if (Buffer.byteLength(raw) > MAX_WS_MESSAGE_BYTES) {

package/src/local/shell.mjs

@@ -3,6 +3,7 @@ import { existsSync } from "node:fs";
 import path from "node:path";
 import { packageRoot } from "./state.mjs";
 import { BoundedOutput } from "./bounded-output.mjs";
+import { terminateProcessTreeWithEscalation } from "./process-tree.mjs";
 
 export function runExecutable(command, args = [], options = {}) {
   const executable = validateExecutable(command);
@@ -28,8 +29,7 @@ export function runExecutable(command, args = [], options = {}) {
     if (Number.isFinite(timeoutMs) && timeoutMs > 0) {
       timer = setTimeout(() => {
         timedOut = true;
-        terminateCommandTree(child, false);
-        killTimer = setTimeout(() => terminateCommandTree(child, true), 2000);
+        killTimer = terminateProcessTreeWithEscalation(child);
       }, timeoutMs);
       timer.unref?.();
     }
@@ -84,23 +84,6 @@ function validateExecutableArgs(value) {
   });
 }
 
-function terminateCommandTree(child, force) {
-  if (!child?.pid) return;
-  if (process.platform === "win32") {
-    try {
-      const killer = spawn("taskkill.exe", ["/PID", String(child.pid), "/T", ...(force ? ["/F"] : [])], {
-        stdio: "ignore",
-        windowsHide: true,
-      });
-      killer.unref();
-      return;
-    } catch {}
-  }
-  const signal = force ? "SIGKILL" : "SIGTERM";
-  try { process.kill(-child.pid, signal); } catch {
-    try { child.kill(signal); } catch {}
-  }
-}
 
 function capturedResult(code, stdout, stderr, extraStderr = "") {
   const stderrText = [stderr.text(), extraStderr].filter(Boolean).join("\n");

package/src/worker/index.ts

@@ -27,7 +27,7 @@ import {
 } from "./http.ts";
 
 const SERVER_NAME = String(serverMetadata.name);
-const SERVER_VERSION = "1.2.5";
+const SERVER_VERSION = "1.2.7";
 const MCP_PROTOCOL_VERSION = String(serverMetadata.protocolVersion);
 const MCP_SUPPORTED_PROTOCOL_VERSIONS = serverMetadata.supportedProtocolVersions.map((value) => String(value));
 const JSONRPC_VERSION = "2.0";