mandala-computer-mcp 0.1.0

package/dist/tools/webhooks.js

@@ -0,0 +1,260 @@
+import { z } from 'zod';
+import { NotFoundError } from '../errors.js';
+import { guarded, refused, said } from '../format.js';
+import * as P from '../paths.js';
+/**
+ * The webhooks resource (platform OPL-4300), mirrored as the CRUD and nothing
+ * more (OPL-4306). This server never RECEIVES a webhook — it has no endpoint
+ * for the platform to POST to, and a model taking turns has nowhere to be
+ * woken — so there is no `verify` here, and deliberately so: the design says in
+ * as many words that the MCP server and the CLI get the CRUD only. What a
+ * model does with these is set up the endpoint a CI job or a queue worker will
+ * be woken at, read whether deliveries are reaching it, and hand the secret
+ * over to whoever runs it.
+ *
+ * Every tool here is account-scoped, like `get_usage` and `get_retention`: a
+ * subscription belongs to the account and receives events from many computers,
+ * so none of them takes a `computer_id` and none of them consults the session's
+ * selected computer. A `computers` FILTER is a different thing and is a body
+ * field.
+ */
+const webhookIdArg = {
+    webhook_id: z.string().describe('The subscription id — `whk-` and sixteen hex characters.'),
+};
+/**
+ * The types a webhook can subscribe to, for the tool descriptions only.
+ *
+ * The socket's vocabulary less `file.changed`, which a webhook never carries:
+ * a file watch is a connection parameter on the socket, and a webhook has no
+ * connection to set one on. Not an enum on the argument, for the reason
+ * `wait_for_event` gives about its own list: the platform refuses an unknown
+ * type with a 400 that lists the current vocabulary, so a closed enum here
+ * would refuse a type the platform had started accepting.
+ */
+const EVENT_TYPES = [
+    'window.opened',
+    'window.closed',
+    'window.focused',
+    'window.blurred',
+    'clipboard.changed',
+    'process.exited',
+    'computer.idle',
+    'computer.ready',
+    'computer.started',
+    'computer.stopped',
+    'computer.suspended',
+];
+/**
+ * The four fields a create and an update share, described for the one being
+ * built. Omission means two different things on the two routes — "every
+ * type" on a create, "leave the filter as it is" on an update — and a model
+ * fills a field from ITS description, not from the tool's, so each has to say
+ * which it means. One shared copy said the create meaning on both.
+ */
+const filterArgs = (on) => {
+    const omit = on === 'create'
+        ? 'Omit or send [] for every'
+        : 'Omit to keep the current filter; send [] to clear it to every';
+    return {
+        description: z.string().optional().describe('Free text for the listing, up to 200 characters.'),
+        events: z
+            .array(z.string())
+            .optional()
+            .describe(`Event types to deliver: ${EVENT_TYPES.join(', ')}. ${omit} type. file.changed is never delivered to a webhook. An unknown type is refused by the platform with the current list.`),
+        computers: z
+            .array(z.string())
+            .optional()
+            .describe(`Computer ids to deliver for, up to 64. ${omit} computer the key can see. Not checked against your computers — a subscription may name a computer you are about to create.`),
+        enabled: z.boolean().optional().describe('Whether deliveries are made.'),
+    };
+};
+const asRecord = (v) => v !== null && typeof v === 'object' && !Array.isArray(v) ? v : {};
+/**
+ * One subscription's health in a clause, for the sentence in front of a
+ * listing or a read. Says the thing a model acts on — whether deliveries are
+ * being made, and if not, whose decision that was — rather than restating the
+ * timestamps underneath it.
+ */
+function health(w) {
+    if (w.enabled === false) {
+        return w.disabled_reason === 'failing'
+            ? 'DISABLED BY THE PLATFORM after a day of failures — update_webhook with enabled: true to start it again'
+            : 'disabled by you';
+    }
+    const success = instant(w.last_success_at);
+    const failure = instant(w.last_failure_at);
+    if (success !== undefined && failure === undefined)
+        return 'healthy';
+    if (failure !== undefined && success === undefined) {
+        return `no delivery has ever been accepted (newest attempt: ${attempt(w.last_status)})`;
+    }
+    if (failure !== undefined && success !== undefined && failure > success) {
+        return `failing since its last success (newest attempt: ${attempt(w.last_status)})`;
+    }
+    if (success !== undefined)
+        return 'healthy';
+    return 'nothing delivered yet';
+}
+/**
+ * A timestamp as a number, or undefined for anything that is not one. Parsed
+ * rather than compared as strings: two RFC 3339 spellings of nearby instants —
+ * one with fractional seconds and one without — do not sort by the clock, and
+ * a "healthy" read off that would be wrong about the newest attempt.
+ */
+function instant(v) {
+    if (typeof v !== 'string' || !v)
+        return undefined;
+    const t = Date.parse(v);
+    return Number.isNaN(t) ? undefined : t;
+}
+const attempt = (status) => typeof status === 'number' ? `HTTP ${status}` : 'no answer';
+/**
+ * The sentence in front of a create or a rotate — the two answers that carry
+ * the secret, and the only two that ever will. Said in the first line rather
+ * than left to the schema, because a model that files the JSON away and reads
+ * it back later has, by then, lost the one thing that cannot be re-read.
+ */
+const shownOnce = (verb, w) => `${verb} ${w.id ?? 'the subscription'}. THE SECRET IN THIS ANSWER IS SHOWN ONCE and cannot be read back: store it now, or hand it to whoever runs ${w.url ?? 'the endpoint'}. Every delivery is signed with it (Standard Webhooks v1: webhook-id, webhook-timestamp, webhook-signature over the raw body). rotate_webhook_secret is the only way to get another.`;
+/** The states of a delivery listing, counted, so the line says what is stuck. */
+function deliveriesLine(id, list) {
+    if (!list.length) {
+        return `No deliveries recorded for ${id}. Either nothing it subscribes to has happened, or it was created too recently — test_webhook queues one you can watch for here.`;
+    }
+    const counts = new Map();
+    for (const d of list)
+        counts.set(d.state ?? 'unknown', (counts.get(d.state ?? 'unknown') ?? 0) + 1);
+    const summary = [...counts].map(([state, n]) => `${n} ${state}`).join(', ');
+    const newest = list[0];
+    const outcome = newest.state === 'delivered'
+        ? 'accepted'
+        : `${newest.state}${newest.last_error ? ` (${newest.last_error})` : ''}`;
+    return (`${list.length} deliveries for ${id}, newest first: ${summary}. The newest is a ${newest.event_type ?? 'unknown'} event, ${outcome} after ${newest.attempts ?? 0} attempt(s). ` +
+        'exhausted means eight attempts failed over about fourteen hours and it will not be retried; pending and in_flight are still being tried.');
+}
+export const registerWebhooks = (server, session) => {
+    server.registerTool('list_webhooks', {
+        title: 'List webhook subscriptions',
+        description: 'Every webhook subscription on the account, with its health: whether it is enabled, when its endpoint last accepted a delivery and when one last failed. A webhook is an HTTPS endpoint the platform POSTs events to — the other transport for the same events wait_for_event reads, for a CI job or a queue worker that wants to be woken rather than to wait. Never carries a secret: that is shown once, by create_webhook or rotate_webhook_secret. A workspace-scoped key sees only the subscriptions confined to that workspace.',
+        inputSchema: {},
+        annotations: { readOnlyHint: true },
+    }, (_args, extra) => guarded(async () => {
+        const body = await session.api.with(extra.signal).json('GET', P.WEBHOOKS);
+        const list = Array.isArray(body) ? body : [];
+        if (!list.length) {
+            return said('No webhook subscriptions on this account. create_webhook makes one.', body);
+        }
+        const lines = list.map((w) => `${w.id ?? '?'} → ${w.url ?? '?'}: ${health(w)}`);
+        return said(`${list.length} webhook subscription${list.length === 1 ? '' : 's'}, oldest first:\n${lines.join('\n')}`, body);
+    }));
+    server.registerTool('create_webhook', {
+        title: 'Subscribe an endpoint to this account’s events',
+        description: 'Subscribe an HTTPS endpoint to this account’s events. THE ANSWER CARRIES THE SIGNING SECRET ONCE — it is not readable again, so store it or hand it over before doing anything else. Each event is POSTed as the same JSON object wait_for_event hands you, byte for byte, signed with Standard Webhooks v1 headers (webhook-id, webhook-timestamp, webhook-signature); the receiver should verify the raw body, acknowledge with a 2xx before doing the work, and refuse a timestamp more than 300 seconds off. Failed deliveries are retried eight times over about fourteen hours; an endpoint that keeps failing for a day is disabled. The url must be https, must not carry a username or password, and must resolve to a public address — a private or loopback address is refused. Paid plans allow ten subscriptions; an account with no plan allows none.',
+        inputSchema: {
+            url: z
+                .string()
+                .describe('Where to POST. https:// only, no username or password, resolving to a public address. A port other than 443 is fine.'),
+            ...filterArgs('create'),
+        },
+    }, (args, extra) => guarded(async () => {
+        const w = asRecord(await session.api
+            .with(extra.signal)
+            .json('POST', P.WEBHOOKS, { body: P.webhookBody(args) }));
+        return said(shownOnce('Created', w), w);
+    }));
+    server.registerTool('get_webhook', {
+        title: 'Read a webhook subscription',
+        description: 'One subscription with its health: whether it is enabled and why not if not, when the endpoint last accepted a delivery, when one last failed, and the status of the newest attempt. Never the secret. For the individual deliveries and what became of each, list_webhook_deliveries.',
+        inputSchema: webhookIdArg,
+        annotations: { readOnlyHint: true },
+    }, ({ webhook_id }, extra) => guarded(async () => {
+        const w = asRecord(await session.api.with(extra.signal).json('GET', P.webhook(webhook_id)));
+        return said(`${w.id ?? webhook_id} → ${w.url ?? '?'}: ${health(w)}.`, w);
+    }));
+    server.registerTool('update_webhook', {
+        title: 'Change a webhook subscription',
+        description: 'Change the endpoint, the description, the filters, or whether it is enabled. Fields you leave out are kept as they are; name at least one. A new url is checked exactly as on create. enabled: true clears a disable the platform imposed for failures and starts fresh; enabled: false stops deliveries and records that you chose to. The secret does not change — rotate_webhook_secret is for that.',
+        inputSchema: {
+            ...webhookIdArg,
+            url: z
+                .string()
+                .optional()
+                .describe('A new endpoint, checked exactly as on create: https, no credentials, public address.'),
+            ...filterArgs('update'),
+        },
+        annotations: { idempotentHint: true },
+    }, ({ webhook_id, ...fields }, extra) => guarded(async () => {
+        const body = P.webhookBody(fields);
+        if (!Object.keys(body).length) {
+            return refused('Nothing to change: name at least one of url, description, events, computers or enabled. The platform refuses an empty update, so nothing was sent.');
+        }
+        const w = asRecord(await session.api
+            .with(extra.signal)
+            .json('PATCH', P.webhook(webhook_id), { body }));
+        return said(`Updated ${w.id ?? webhook_id} → ${w.url ?? '?'}: ${health(w)}.`, w);
+    }));
+    server.registerTool('rotate_webhook_secret', {
+        title: 'Rotate a webhook’s signing secret',
+        description: 'Mint a new signing secret for a subscription. THE ANSWER CARRIES IT ONCE, like create_webhook. The old secret goes on being honoured for 24 hours — every delivery in that window carries two signatures on the one webhook-signature header, new first, so a receiver that accepts either passes throughout — which is the window to get the new one deployed. Rotating again inside it replaces the previous secret rather than keeping three. Do this when a secret has leaked or when whoever held it has moved on.',
+        inputSchema: webhookIdArg,
+    }, ({ webhook_id }, extra) => guarded(async () => {
+        const w = asRecord(await session.api
+            .with(extra.signal)
+            .json('POST', P.webhookAction(webhook_id, 'rotate')));
+        return said(shownOnce('Rotated the secret on', w), w);
+    }));
+    server.registerTool('test_webhook', {
+        title: 'Send a test delivery',
+        description: 'Queue one signed delivery of a synthetic webhook.test event through the ordinary path, so it is signed, retried and recorded exactly as a real one. The answer is the delivery record, ACCEPTED rather than finished: the endpoint has not been called yet when this returns. Read what it said back with list_webhook_deliveries a little later — a first attempt goes out within seconds, and a failed one is retried after 30 seconds. A disabled subscription is refused; enable it first with update_webhook.',
+        inputSchema: webhookIdArg,
+    }, ({ webhook_id }, extra) => guarded(async () => {
+        const d = asRecord(await session.api
+            .with(extra.signal)
+            .json('POST', P.webhookAction(webhook_id, 'test')));
+        return said(`Queued test delivery ${d.id ?? ''} to ${webhook_id}. It is ${d.state ?? 'pending'}: the endpoint has not been called yet. Call list_webhook_deliveries for ${webhook_id} in a few seconds to read what it answered.`, d);
+    }));
+    server.registerTool('list_webhook_deliveries', {
+        title: 'List a webhook’s deliveries',
+        description: 'The newest hundred deliveries to one subscription, newest first, each with its state (pending, in_flight, delivered, exhausted or dropped), its attempt count, and the HTTP status or one-line error of its newest attempt. This is where a delivery that ran out of attempts shows up — nothing is dropped silently. Finished deliveries are kept for seven days. Each carries the event’s cursor, which is what to pass as since to the socket to read on from that point.',
+        inputSchema: webhookIdArg,
+        annotations: { readOnlyHint: true },
+    }, ({ webhook_id }, extra) => guarded(async () => {
+        const body = await session.api
+            .with(extra.signal)
+            .json('GET', P.webhookAction(webhook_id, 'deliveries'));
+        const list = Array.isArray(body) ? body : [];
+        return said(deliveriesLine(webhook_id, list), body);
+    }));
+    server.registerTool('delete_webhook', {
+        title: 'Delete a webhook subscription',
+        description: 'Remove a subscription and every delivery record it holds, pending ones included. Nothing more is sent to the endpoint. Irreversible: a new subscription to the same url gets a new id and a new secret. To stop deliveries without losing the record, update_webhook with enabled: false instead.',
+        inputSchema: {
+            ...webhookIdArg,
+            confirm: z
+                .literal(true)
+                .describe('Must be true. This removes the subscription and its delivery history.'),
+        },
+        annotations: { destructiveHint: true, idempotentHint: true },
+    }, ({ webhook_id }, extra) => guarded(async () => {
+        let res;
+        try {
+            res = await session.api.with(extra.signal).send('DELETE', P.webhook(webhook_id));
+        }
+        catch (err) {
+            // A 404 is the state this call asked for, and this tool is annotated
+            // `idempotentHint`, so the retry after a lost 2xx is one a client is
+            // invited to make. Said as a success but not as "Deleted": the same
+            // 404 answers an id that was never on this account — the platform
+            // will not say whether a subscription exists outside your scope —
+            // and "deleted" over a mistyped id leaves a real subscription
+            // delivering. delete_computer and delete_snapshot answer the same way.
+            if (!(err instanceof NotFoundError))
+                throw err;
+            return said(`Nothing was deleted: the platform has no webhook with the id ${webhook_id} on this account. ` +
+                'Either it was already removed — if this is a retry, the first call is the one that did it — or ' +
+                'the id is not one of yours, in which case NO subscription has been touched and a real one may ' +
+                'still be delivering under the id you meant. list_webhooks says which of the two this is.');
+        }
+        return said(`Deleted ${webhook_id}. Nothing more will be sent to its endpoint, and its delivery history is gone with it.`, res);
+    }));
+};
+//# sourceMappingURL=webhooks.js.map

package/dist/tools/webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../../src/tools/webhooks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAGjC;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,YAAY,GAAG;IACnB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;CAC5F,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,WAAW,GAAG;IAClB,eAAe;IACf,eAAe;IACf,gBAAgB;IAChB,gBAAgB;IAChB,mBAAmB;IACnB,gBAAgB;IAChB,eAAe;IACf,gBAAgB;IAChB,kBAAkB;IAClB,kBAAkB;IAClB,oBAAoB;CACrB,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,CAAC,EAAuB,EAAE,EAAE;IAC7C,MAAM,IAAI,GACR,EAAE,KAAK,QAAQ;QACb,CAAC,CAAC,2BAA2B;QAC7B,CAAC,CAAC,+DAA+D,CAAC;IACtE,OAAO;QACL,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kDAAkD,CAAC;QAC/F,MAAM,EAAE,CAAC;aACN,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,QAAQ,EAAE;aACV,QAAQ,CACP,2BAA2B,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,wHAAwH,CACnL;QACH,SAAS,EAAE,CAAC;aACT,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACjB,QAAQ,EAAE;aACV,QAAQ,CACP,0CAA0C,IAAI,6HAA6H,CAC5K;QACH,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;KACzE,CAAC;AACJ,CAAC,CAAC;AAsBF,MAAM,QAAQ,GAAG,CAAC,CAAU,EAA2B,EAAE,CACvD,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;AAEjG;;;;;GAKG;AACH,SAAS,MAAM,CAAC,CAAU;IACxB,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QACxB,OAAO,CAAC,CAAC,eAAe,KAAK,SAAS;YACpC,CAAC,CAAC,wGAAwG;YAC1G,CAAC,CAAC,iBAAiB,CAAC;IACxB,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;IAC3C,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACrE,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACnD,OAAO,uDAAuD,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC;IAC1F,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,GAAG,OAAO,EAAE,CAAC;QACxE,OAAO,mDAAmD,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC;IACtF,CAAC;IACD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,OAAO,uBAAuB,CAAC;AACjC,CAAC;AAED;;;;;GAKG;AACH,SAAS,OAAO,CAAC,CAA4B;IAC3C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAClD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxB,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,MAAiC,EAAE,EAAE,CACpD,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;AAE9D;;;;;GAKG;AACH,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,CAAU,EAAE,EAAE,CAC7C,GAAG,IAAI,IAAI,CAAC,CAAC,EAAE,IAAI,kBAAkB,+GAA+G,CAAC,CAAC,GAAG,IAAI,cAAc,sLAAsL,CAAC;AAEpW,iFAAiF;AACjF,SAAS,cAAc,CAAC,EAAU,EAAE,IAAgB;IAClD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACjB,OAAO,8BAA8B,EAAE,kIAAkI,CAAC;IAC5K,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,IAAI;QAClB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAChF,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,OAAO,GACX,MAAM,CAAC,KAAK,KAAK,WAAW;QAC1B,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC7E,OAAO,CACL,GAAG,IAAI,CAAC,MAAM,mBAAmB,EAAE,mBAAmB,OAAO,qBAAqB,MAAM,CAAC,UAAU,IAAI,SAAS,WAAW,OAAO,UAAU,MAAM,CAAC,QAAQ,IAAI,CAAC,eAAe;QAC/K,0IAA0I,CAC3I,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAc,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;IAC7D,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,KAAK,EAAE,4BAA4B;QACnC,WAAW,EACT,ugBAAugB;QACzgB,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;KACpC,EACD,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CACf,OAAO,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAU,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;QACnF,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,IAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,qEAAqE,EAAE,IAAI,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChF,OAAO,IAAI,CACT,GAAG,IAAI,CAAC,MAAM,wBAAwB,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,oBAAoB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EACxG,IAAI,CACL,CAAC;IACJ,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,KAAK,EAAE,gDAAgD;QACvD,WAAW,EACT,q0BAAq0B;QACv0B,WAAW,EAAE;YACX,GAAG,EAAE,CAAC;iBACH,MAAM,EAAE;iBACR,QAAQ,CACP,sHAAsH,CACvH;YACH,GAAG,UAAU,CAAC,QAAQ,CAAC;SACxB;KACF,EACD,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,OAAO,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,CAAC,GAAG,QAAQ,CAChB,MAAM,OAAO,CAAC,GAAG;aACd,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;aAClB,IAAI,CAAU,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CACzD,CAAC;QACb,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,aAAa,EACb;QACE,KAAK,EAAE,6BAA6B;QACpC,WAAW,EACT,uRAAuR;QACzR,WAAW,EAAE,YAAY;QACzB,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;KACpC,EACD,CAAC,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,CACxB,OAAO,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,CAAC,GAAG,QAAQ,CAChB,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAU,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CACtE,CAAC;QACb,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,UAAU,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC3E,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,KAAK,EAAE,+BAA+B;QACtC,WAAW,EACT,yYAAyY;QAC3Y,WAAW,EAAE;YACX,GAAG,YAAY;YACf,GAAG,EAAE,CAAC;iBACH,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,sFAAsF,CACvF;YACH,GAAG,UAAU,CAAC,QAAQ,CAAC;SACxB;QACD,WAAW,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE;KACtC,EACD,CAAC,EAAE,UAAU,EAAE,GAAG,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,CACnC,OAAO,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YAC9B,OAAO,OAAO,CACZ,oJAAoJ,CACrJ,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,GAAG,QAAQ,CAChB,MAAM,OAAO,CAAC,GAAG;aACd,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;aAClB,IAAI,CAAU,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAChD,CAAC;QACb,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,UAAU,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACnF,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,uBAAuB,EACvB;QACE,KAAK,EAAE,mCAAmC;QAC1C,WAAW,EACT,yfAAyf;QAC3f,WAAW,EAAE,YAAY;KAC1B,EACD,CAAC,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,CACxB,OAAO,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,CAAC,GAAG,QAAQ,CAChB,MAAM,OAAO,CAAC,GAAG;aACd,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;aAClB,IAAI,CAAU,MAAM,EAAE,CAAC,CAAC,aAAa,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CACrD,CAAC;QACb,OAAO,IAAI,CAAC,SAAS,CAAC,uBAAuB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,cAAc,EACd;QACE,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EACT,ofAAof;QACtf,WAAW,EAAE,YAAY;KAC1B,EACD,CAAC,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,CACxB,OAAO,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,CAAC,GAAG,QAAQ,CAChB,MAAM,OAAO,CAAC,GAAG;aACd,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;aAClB,IAAI,CAAU,MAAM,EAAE,CAAC,CAAC,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAClD,CAAC;QACd,OAAO,IAAI,CACT,wBAAwB,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,UAAU,WAAW,CAAC,CAAC,KAAK,IAAI,SAAS,4EAA4E,UAAU,6CAA6C,EACrN,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,yBAAyB,EACzB;QACE,KAAK,EAAE,6BAA6B;QACpC,WAAW,EACT,8cAA8c;QAChd,WAAW,EAAE,YAAY;QACzB,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;KACpC,EACD,CAAC,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,CACxB,OAAO,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG;aAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;aAClB,IAAI,CAAU,KAAK,EAAE,CAAC,CAAC,aAAa,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,IAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,OAAO,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IACtD,CAAC,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;QACE,KAAK,EAAE,+BAA+B;QACtC,WAAW,EACT,mSAAmS;QACrS,WAAW,EAAE;YACX,GAAG,YAAY;YACf,OAAO,EAAE,CAAC;iBACP,OAAO,CAAC,IAAI,CAAC;iBACb,QAAQ,CAAC,uEAAuE,CAAC;SACrF;QACD,WAAW,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE;KAC7D,EACD,CAAC,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,CACxB,OAAO,CAAC,KAAK,IAAI,EAAE;QACjB,IAAI,GAAY,CAAC;QACjB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;QACnF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,qEAAqE;YACrE,qEAAqE;YACrE,oEAAoE;YACpE,kEAAkE;YAClE,kEAAkE;YAClE,8DAA8D;YAC9D,uEAAuE;YACvE,IAAI,CAAC,CAAC,GAAG,YAAY,aAAa,CAAC;gBAAE,MAAM,GAAG,CAAC;YAC/C,OAAO,IAAI,CACT,gEAAgE,UAAU,oBAAoB;gBAC5F,iGAAiG;gBACjG,gGAAgG;gBAChG,0FAA0F,CAC7F,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CACT,WAAW,UAAU,wFAAwF,EAC7G,GAAG,CACJ,CAAC;IACJ,CAAC,CAAC,CACL,CAAC;AACJ,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,59 @@
+{
+  "name": "mandala-computer-mcp",
+  "version": "0.1.0",
+  "description": "MCP server for Mandala Computer — cloud desktops for AI agents",
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "mandala",
+    "computer-use",
+    "cloud-desktop",
+    "ai-agents"
+  ],
+  "license": "MIT",
+  "homepage": "https://mandala.computer",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/mandalacomputer/mcp.git"
+  },
+  "bugs": "https://github.com/mandalacomputer/mcp/issues",
+  "type": "module",
+  "bin": {
+    "mandala-computer-mcp": "dist/cli.js"
+  },
+  "exports": {
+    ".": "./dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=20.3.0"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "dev": "tsc -p tsconfig.build.json --watch",
+    "test": "vitest run && node scripts/check-surface.mjs",
+    "test:watch": "vitest",
+    "typecheck": "tsc --noEmit",
+    "lint": "biome check .",
+    "format": "biome check --write .",
+    "prepublishOnly": "npm run build",
+    "check:surface": "node scripts/check-surface.mjs"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.30.0",
+    "express": "^5.1.0",
+    "undici": "^6.28.0",
+    "zod": "^3.25.76"
+  },
+  "devDependencies": {
+    "@biomejs/biome": "^2.3.0",
+    "@types/express": "^5.0.0",
+    "@types/node": "^22.10.0",
+    "typescript": "^5.7.0",
+    "vitest": "^3.2.0"
+  }
+}