mobilecoder-mcp 2.1.0 → 2.1.1

package/dist/cli.js

@@ -6,7 +6,7 @@ const program = new Command();
 program
     .name('mobilecoder-mcp')
     .description('MobileCoder Desktop Agent - ZK-Relay Edition')
-    .version('2.0.0');
+    .version('2.1.1');
 program
     .command('init')
     .description('Start the secure relay agent')

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "mobilecoder-mcp",
-  "version": "2.1.0",
+  "version": "2.1.1",
   "description": "Secure Zero-Knowledge Terminal Relay for MobileCoder",
   "main": "dist/agent.js",
   "bin": {
-    "mobilecoder-mcp": "./dist/cli.js"
+    "mobilecoder-mcp": "dist/cli.js"
   },
   "scripts": {
     "start": "node dist/cli.js",

package/src/agent.ts

@@ -1,384 +0,0 @@
-
-import { io, Socket } from 'socket.io-client';
-import * as os from 'os';
-import * as pty from 'node-pty';
-import * as crypto from 'crypto';
-import chalk from 'chalk';
-import ora from 'ora';
-import * as fs from 'fs';
-import * as path from 'path';
-
-// 🚨 BURAYI KENDİ DOMAIN ADRESİNLE DEĞİŞTİR!
-const RELAY_SERVER_URL = 'https://api.mobilecoder.xyz';
-
-// Security Constants
-const PBKDF2_ITERATIONS = 100000;
-const KEY_LENGTH = 32; // 256 bits
-const SALT = 'mobilecoder-salt-v2';
-const KEY_ROTATION_INTERVAL = 600000; // 10 minutes
-const MESSAGE_MAX_AGE = 300000; // 5 minutes
-
-export class ZKRelayAgent {
-    private socket: Socket;
-    private ptyProcess: any;
-    private secretCode: string;
-    private roomId: string;
-
-    // 🔐 Güçlendirilmiş Güvenlik Değişkenleri
-    private masterKey: Buffer;
-    private sessionKey: Buffer;
-    private sessionCounter: number = 0;
-    private seenNonces: Set<string> = new Set();
-    private nonceCleanupInterval: NodeJS.Timeout | null = null;
-    private keyRotationInterval: NodeJS.Timeout | null = null;
-
-    private spinner = ora('Initializing Secure Tunnel...');
-
-    constructor() {
-        this.setupSecurity();
-        this.initPTY();
-        this.connectToRelay();
-        this.startSecurityMaintenance();
-    }
-
-    // 1. Güvenlik Katmanı: PBKDF2 ile Güçlendirilmiş Anahtar Türetme
-    private setupSecurity() {
-        // 6 Haneli rastgele kod (Kullanıcının göreceği)
-        const randomNum = Math.floor(100000 + Math.random() * 900000);
-        this.secretCode = randomNum.toString();
-
-        // Oda ID'si: Kodun Hash'i (Sunucu sadece bunu görür, kodu göremez)
-        this.roomId = crypto.createHash('sha256').update(this.secretCode).digest('hex');
-
-        // 🔐 PBKDF2 ile Master Key Türetme (Brute-force'a karşı savunma)
-        this.masterKey = crypto.pbkdf2Sync(
-            this.secretCode,
-            SALT,
-            PBKDF2_ITERATIONS,
-            KEY_LENGTH,
-            'sha256'
-        );
-
-        // Session Key (PFS için rotasyonlu)
-        this.sessionKey = this.deriveSessionKey(0);
-    }
-
-    // 🔐 Session Key Türetme (Perfect Forward Secrecy)
-    private deriveSessionKey(counter: number): Buffer {
-        return crypto.pbkdf2Sync(
-            this.masterKey,
-            `session-${counter}`,
-            10000,
-            KEY_LENGTH,
-            'sha256'
-        );
-    }
-
-    // 🔄 Key Rotation (Her 10 dakikada bir)
-    private rotateKey() {
-        this.sessionCounter++;
-        this.sessionKey = this.deriveSessionKey(this.sessionCounter);
-        console.log(chalk.cyan(`🔄 Session key rotated to #${this.sessionCounter}`));
-
-        // Notify peer about key rotation
-        this.sendSecurePayload('key_rotation', { counter: this.sessionCounter });
-    }
-
-    // 🧹 Güvenlik Bakımı
-    private startSecurityMaintenance() {
-        // Nonce temizliği (5 dakikadan eski nonce'ları sil)
-        this.nonceCleanupInterval = setInterval(() => {
-            this.seenNonces.clear();
-        }, MESSAGE_MAX_AGE);
-
-        // Key rotation
-        this.keyRotationInterval = setInterval(() => {
-            this.rotateKey();
-        }, KEY_ROTATION_INTERVAL);
-    }
-
-    // 2. Terminal (PTY) Başlatma
-    private initPTY() {
-        const shell = os.platform() === 'win32' ? 'powershell.exe' : (process.env.SHELL || 'bash');
-
-        this.ptyProcess = pty.spawn(shell, [], {
-            name: 'xterm-256color',
-            cols: 80,
-            rows: 24,
-            cwd: process.cwd(),
-            env: process.env
-        });
-
-        // Terminalden çıkan veriyi şifrele ve yolla
-        this.ptyProcess.onData((data: string) => {
-            this.sendSecurePayload('term_data', data);
-        });
-    }
-
-    // 3. Relay Sunucusuna Bağlanma
-    private connectToRelay() {
-        this.spinner.start('Connecting to MobileCoder Relay Network...');
-
-        this.socket = io(RELAY_SERVER_URL, {
-            transports: ['websocket'], // Hız için sadece websocket
-            reconnection: true,
-            reconnectionAttempts: Infinity
-        });
-
-        this.socket.on('connect', () => {
-            this.spinner.succeed(chalk.green('Connected to Relay Node!'));
-
-            // Odaya Katıl (Sadece Hash ID gönderilir)
-            this.socket.emit('join_room', { code: this.roomId, type: 'agent' });
-
-            this.printBanner();
-        });
-
-        this.socket.on('disconnect', () => {
-            this.spinner.warn(chalk.yellow('Connection lost. Reconnecting...'));
-        });
-
-        // Mobilden biri bağlandığında
-        this.socket.on('peer_joined', () => {
-            console.log(chalk.green('\n📱 Mobile Client Connected via Encrypted Tunnel!'));
-            this.sendEnvInfo();
-        });
-
-        // Mobilden şifreli veri geldiğinde
-        this.socket.on('relay_data', (message: { room: string, payload: any }) => {
-            this.handleIncomingMessage(message as any);
-        });
-
-        // Also listen for connect_error
-        this.socket.on('connect_error', (err) => {
-            // console.error(err);
-        });
-    }
-
-    // 🔐 AES-256-CBC ile Şifreleme (Nonce tabanlı)
-    private encrypt(data: string): { nonce: string; data: string; timestamp: number } {
-        const nonce = crypto.randomBytes(16);
-        const cipher = crypto.createCipheriv('aes-256-cbc', this.sessionKey, nonce);
-
-        const encrypted = Buffer.concat([
-            cipher.update(data, 'utf8'),
-            cipher.final()
-        ]);
-
-        return {
-            nonce: nonce.toString('base64'),
-            data: encrypted.toString('base64'),
-            timestamp: Date.now()
-        };
-    }
-
-    // 🔐 AES-256-CBC ile Şifre Çözme (Replay Attack Korumalı)
-    private decrypt(packet: { nonce: string; data: string; timestamp: number }): string {
-        // Timestamp kontrolü (5 dakikadan eski mesajları reddet)
-        if (Date.now() - packet.timestamp > MESSAGE_MAX_AGE) {
-            throw new Error('Message too old - potential replay attack');
-        }
-
-        // Nonce uniqueness kontrolü (Replay attack önleme)
-        if (this.seenNonces.has(packet.nonce)) {
-            throw new Error('Replay attack detected - duplicate nonce');
-        }
-        this.seenNonces.add(packet.nonce);
-
-        const decipher = crypto.createDecipheriv(
-            'aes-256-cbc',
-            this.sessionKey,
-            Buffer.from(packet.nonce, 'base64')
-        );
-
-        return Buffer.concat([
-            decipher.update(Buffer.from(packet.data, 'base64')),
-            decipher.final()
-        ]).toString('utf8');
-    }
-
-    // Gelen veriyi çöz ve işle
-    private handleIncomingMessage(encryptedPayload: any) {
-        try {
-            let decryptedText: string;
-
-            // Yeni format: { nonce, data, timestamp }
-            if (typeof encryptedPayload === 'object' && encryptedPayload.nonce) {
-                decryptedText = this.decrypt(encryptedPayload);
-            }
-            // Legacy format: { e: ciphertext } (CryptoJS uyumluluğu)
-            else if (typeof encryptedPayload === 'object' && encryptedPayload.e) {
-                // Legacy CryptoJS decrypt fallback
-                const CryptoJS = require('crypto-js');
-                const bytes = CryptoJS.AES.decrypt(encryptedPayload.e, this.secretCode);
-                decryptedText = bytes.toString(CryptoJS.enc.Utf8);
-            }
-            else {
-                return;
-            }
-
-            if (!decryptedText) return;
-
-            // Veri JSON mu? (Resize komutu vs olabilir)
-            try {
-                const cmd = JSON.parse(decryptedText);
-
-                // Handle key rotation from peer
-                if (cmd.type === 'key_rotation') {
-                    this.sessionCounter = cmd.counter;
-                    this.sessionKey = this.deriveSessionKey(this.sessionCounter);
-                    console.log(chalk.cyan(`🔄 Key synced to session #${this.sessionCounter}`));
-                    return;
-                }
-
-                // 1. Terminal Input (Keystrokes)
-                if (cmd.type === 'input') {
-                    this.ptyProcess.write(cmd.data);
-                    return;
-                }
-
-                // 2. Terminal Resize
-                if (cmd.type === 'resize') {
-                    this.ptyProcess.resize(cmd.cols, cmd.rows);
-                    return;
-                }
-
-                // 3. Chat Commands (e.g. "ls -la")
-                if (cmd.type === 'command') {
-                    this.ptyProcess.write(cmd.text + '\r');
-                    return;
-                }
-
-                // 4. CLI Tool/Button Commands (e.g. "git status")
-                if (cmd.type === 'cli_command') {
-                    this.ptyProcess.write(cmd.command + '\r');
-                    return;
-                }
-
-                // 5. Tool Calls (File System Access)
-                if (cmd.type === 'tool_call') {
-                    this.handleToolCall(cmd.tool, cmd.data, cmd.id);
-                    return;
-                }
-
-            } catch (e) {
-                // JSON değilse saf terminal girdisidir
-                this.ptyProcess.write(decryptedText);
-            }
-        } catch (error) {
-            // Şifre çözülemezse (Yanlış anahtar vb.) sessizce yut
-            console.error(chalk.red('Decryption failed:'), (error as Error).message);
-        }
-    }
-
-    private async handleToolCall(tool: string, args: any, id: string) {
-        try {
-            let result: any = null;
-
-            if (tool === 'list_directory') {
-                const dirPath = args.path ? path.resolve(args.path) : process.cwd();
-                const entries = await fs.promises.readdir(dirPath, { withFileTypes: true });
-
-                const files = entries.map(entry => ({
-                    name: entry.name,
-                    type: entry.isDirectory() ? 'directory' : 'file',
-                    size: 0 // Simplification for speed
-                }));
-
-                result = { files };
-            }
-
-            else if (tool === 'read_file') {
-                const filePath = path.resolve(args.path);
-                const content = await fs.promises.readFile(filePath, 'utf-8');
-                result = { content };
-            }
-            else {
-                throw new Error(`Unknown tool: ${tool}`);
-            }
-
-            this.sendSecurePayload('tool_result', {
-                id,
-                result
-            });
-
-        } catch (error: any) {
-            this.sendSecurePayload('tool_result', {
-                id,
-                error: error.message,
-                type: 'error'
-            });
-        }
-    }
-
-    // Veriyi şifrele ve gönder
-    private sendSecurePayload(type: string, data: any) {
-        let payloadStr = '';
-
-        if (type === 'meta' || type === 'tool_result' || type === 'key_rotation') {
-            // Standardize format
-            if (type === 'tool_result') {
-                if (data.type === 'error') {
-                    payloadStr = JSON.stringify({ ...data });
-                } else {
-                    payloadStr = JSON.stringify({ type: 'result', ...data });
-                }
-            } else if (type === 'key_rotation') {
-                payloadStr = JSON.stringify({ type: 'key_rotation', ...data });
-            } else {
-                payloadStr = JSON.stringify(data);
-            }
-        } else if (type === 'term_data') {
-            // Wrap output in { type: 'output', data: ... }
-            if (typeof data === 'string') {
-                payloadStr = JSON.stringify({ type: 'output', data: data });
-            } else {
-                payloadStr = JSON.stringify(data);
-            }
-        }
-
-        // Fallback if empty (shouldn't happen with above logic)
-        if (!payloadStr) payloadStr = JSON.stringify(data);
-
-        // 🔐 Yeni şifreleme formatı ile gönder
-        const encrypted = this.encrypt(payloadStr);
-
-        this.socket.emit('relay_data', {
-            room: this.roomId,
-            payload: encrypted
-        });
-    }
-
-    private sendEnvInfo() {
-        const info = {
-            type: 'host_info',
-            username: os.userInfo().username,
-            hostname: os.hostname(),
-            platform: os.platform(),
-            cwd: process.cwd()
-        };
-        this.sendSecurePayload('meta', info);
-    }
-
-    private printBanner() {
-        console.log('\n' + chalk.bgBlue.bold(' MOBILECODER ZK-RELAY v2.1.0 '));
-        console.log(chalk.gray('🔐 PBKDF2-SHA256 + AES-256-CBC + Nonce-Based Replay Protection'));
-        console.log(chalk.gray('🔄 Perfect Forward Secrecy with 10-min Key Rotation\n'));
-
-        console.log(chalk.yellow('┌──────────────────────────────────────┐'));
-        console.log(chalk.yellow('│  🔑 CONNECTION CODE (ENTER ON APP)   │'));
-        console.log(chalk.yellow('│                                      │'));
-        console.log(chalk.yellow(`│        ${chalk.white.bold.bgBlack(` ${this.secretCode.slice(0, 3)} - ${this.secretCode.slice(3)} `)}         │`));
-        console.log(chalk.yellow('│                                      │'));
-        console.log(chalk.yellow('└──────────────────────────────────────┘'));
-        console.log(chalk.cyan('\nWaiting for mobile connection...'));
-    }
-
-    // Cleanup
-    public destroy() {
-        if (this.nonceCleanupInterval) clearInterval(this.nonceCleanupInterval);
-        if (this.keyRotationInterval) clearInterval(this.keyRotationInterval);
-        if (this.socket) this.socket.disconnect();
-        if (this.ptyProcess) this.ptyProcess.kill();
-    }
-}

package/src/cli.ts

@@ -1,35 +0,0 @@
-#!/usr/bin/env node
-import { Command } from 'commander';
-import { ZKRelayAgent } from './agent.js';
-import chalk from 'chalk';
-
-const program = new Command();
-
-program
-    .name('mobilecoder-mcp')
-    .description('MobileCoder Desktop Agent - ZK-Relay Edition')
-    .version('2.0.0');
-
-program
-    .command('init')
-    .description('Start the secure relay agent')
-    .action(() => {
-        try {
-            new ZKRelayAgent();
-        } catch (error) {
-            console.error(chalk.red('Fatal Error:'), error);
-            process.exit(1);
-        }
-    });
-
-// Varsayılan komut (argüman girilmezse init çalışsın)
-if (!process.argv.slice(2).length) {
-    try {
-        new ZKRelayAgent();
-    } catch (error) {
-        console.error(chalk.red('Fatal Error:'), error);
-        process.exit(1);
-    }
-} else {
-    program.parse(process.argv);
-}

package/src/types.d.ts

@@ -1,8 +0,0 @@
-
-declare module 'node-pty' {
-    export function spawn(cmd: string, args: string[], options: any): any;
-}
-
-declare module 'ora' {
-    export default function ora(text?: string | object): any;
-}

package/tsconfig.json

@@ -1,28 +0,0 @@
-{
-  "compilerOptions": {
-    "target": "ES2022",
-    "module": "ESNext",
-    "moduleResolution": "bundler",
-    "lib": [
-      "ES2022"
-    ],
-    "outDir": "./dist",
-    "rootDir": "./src",
-    "strict": false,
-    "noImplicitAny": false,
-    "esModuleInterop": true,
-    "skipLibCheck": true,
-    "forceConsistentCasingInFileNames": true,
-    "resolveJsonModule": true,
-    "declaration": true,
-    "declarationMap": true,
-    "sourceMap": true
-  },
-  "include": [
-    "src/**/*"
-  ],
-  "exclude": [
-    "node_modules",
-    "dist"
-  ]
-}