monomind 2.7.12 → 2.7.14

package/packages/@monomind/cli/dist/src/mcp-tools/session-tools.js

@@ -1,431 +0,0 @@
-/**
- * Session MCP Tools for CLI
- *
- * Tool definitions for session management with file persistence.
- */
-import { existsSync, readFileSync, writeFileSync, renameSync, mkdirSync, readdirSync, unlinkSync, statSync } from 'node:fs';
-import { join } from 'node:path';
-import { randomBytes } from 'node:crypto';
-import { getMonomindDataRoot } from './types.js';
-// Storage paths — SESSION_DIR is relative to the git-safe data root
-const SESSION_DIR = 'sessions';
-function getSessionDir() {
-    return join(getMonomindDataRoot(), SESSION_DIR);
-}
-function getSessionPath(sessionId) {
-    // Sanitize sessionId to prevent path traversal
-    const safeId = sessionId.replace(/[^a-zA-Z0-9_-]/g, '_');
-    return join(getSessionDir(), `${safeId}.json`);
-}
-function ensureSessionDir() {
-    const dir = getSessionDir();
-    if (!existsSync(dir)) {
-        mkdirSync(dir, { recursive: true });
-    }
-}
-const MAX_SESSION_BYTES = 50 * 1024 * 1024;
-function loadSession(sessionId) {
-    try {
-        const path = getSessionPath(sessionId);
-        if (existsSync(path)) {
-            if (statSync(path).size > MAX_SESSION_BYTES)
-                return null;
-            const data = readFileSync(path, 'utf-8');
-            return JSON.parse(data);
-        }
-    }
-    catch (e) {
-        if (process.env.DEBUG || process.env.MONOMIND_DEBUG)
-            console.error('[session-tools] loadSession failed:', e);
-    }
-    return null;
-}
-function saveSession(session) {
-    ensureSessionDir();
-    const sessionPath = getSessionPath(session.sessionId);
-    // Unique tmp filename so concurrent session_save calls cannot collide on
-    // the same .tmp path (which would corrupt the rename target).
-    const tmpPath = `${sessionPath}.${process.pid}.${Date.now()}.tmp`;
-    writeFileSync(tmpPath, JSON.stringify(session, null, 2), 'utf-8');
-    renameSync(tmpPath, sessionPath);
-}
-function listSessions(limit = 200) {
-    ensureSessionDir();
-    const dir = getSessionDir();
-    // Sort by mtime DESC, then bound reads to `limit` files to prevent DoS
-    const files = readdirSync(dir)
-        .filter(f => f.endsWith('.json'))
-        .map(f => {
-        try {
-            const stat = statSync(join(dir, f));
-            return { name: f, mtimeMs: stat.mtimeMs };
-        }
-        catch {
-            return { name: f, mtimeMs: 0 };
-        }
-    })
-        .sort((a, b) => b.mtimeMs - a.mtimeMs)
-        .slice(0, Math.max(1, Math.min(limit, 1000)));
-    const sessions = [];
-    for (const file of files) {
-        try {
-            const filePath = join(dir, file.name);
-            if (statSync(filePath).size > MAX_SESSION_BYTES)
-                continue;
-            const data = readFileSync(filePath, 'utf-8');
-            sessions.push(JSON.parse(data));
-        }
-        catch {
-            // Skip invalid files
-        }
-    }
-    return sessions;
-}
-// Load related stores for session data
-function loadRelatedStores(options) {
-    const data = {};
-    if (options.includeMemory) {
-        try {
-            const memoryPath = join(getMonomindDataRoot(), 'memory', 'store.json');
-            if (existsSync(memoryPath) && statSync(memoryPath).size <= MAX_SESSION_BYTES) {
-                data.memory = JSON.parse(readFileSync(memoryPath, 'utf-8'));
-            }
-        }
-        catch (e) {
-            if (process.env.DEBUG || process.env.MONOMIND_DEBUG)
-                console.error('[session-tools] failed to load memory store:', e);
-        }
-    }
-    if (options.includeTasks) {
-        try {
-            const taskPath = join(getMonomindDataRoot(), 'tasks', 'store.json');
-            if (existsSync(taskPath) && statSync(taskPath).size <= MAX_SESSION_BYTES) {
-                data.tasks = JSON.parse(readFileSync(taskPath, 'utf-8'));
-            }
-        }
-        catch (e) {
-            if (process.env.DEBUG || process.env.MONOMIND_DEBUG)
-                console.error('[session-tools] failed to load task store:', e);
-        }
-    }
-    if (options.includeAgents) {
-        try {
-            const agentPath = join(getMonomindDataRoot(), 'agents', 'store.json');
-            if (existsSync(agentPath) && statSync(agentPath).size <= MAX_SESSION_BYTES) {
-                data.agents = JSON.parse(readFileSync(agentPath, 'utf-8'));
-            }
-        }
-        catch (e) {
-            if (process.env.DEBUG || process.env.MONOMIND_DEBUG)
-                console.error('[session-tools] failed to load agent store:', e);
-        }
-    }
-    return data;
-}
-export const sessionTools = [
-    {
-        name: 'session_save',
-        description: 'Save current session state',
-        category: 'session',
-        inputSchema: {
-            type: 'object',
-            properties: {
-                name: { type: 'string', description: 'Session name' },
-                description: { type: 'string', description: 'Session description' },
-                includeMemory: { type: 'boolean', description: 'Include memory in session' },
-                includeTasks: { type: 'boolean', description: 'Include tasks in session' },
-                includeAgents: { type: 'boolean', description: 'Include agents in session' },
-            },
-            required: ['name'],
-        },
-        handler: async (input) => {
-            const sessionId = `session-${Date.now()}-${randomBytes(6).toString('hex')}`;
-            // Cap name and description: both are persisted verbatim to the session
-            // JSON file on disk.  Without a cap, an attacker can inflate the session
-            // store by supplying a very long name or description.
-            const MAX_SESSION_NAME_LEN = 256;
-            const MAX_SESSION_DESC_LEN = 4 * 1024;
-            const rawSessionName = input.name;
-            const sessionName = typeof rawSessionName === 'string' && rawSessionName.length > MAX_SESSION_NAME_LEN
-                ? rawSessionName.slice(0, MAX_SESSION_NAME_LEN)
-                : rawSessionName;
-            const rawSessionDesc = input.description;
-            const sessionDesc = typeof rawSessionDesc === 'string' && rawSessionDesc.length > MAX_SESSION_DESC_LEN
-                ? rawSessionDesc.slice(0, MAX_SESSION_DESC_LEN)
-                : rawSessionDesc;
-            // Load related data based on options
-            const data = loadRelatedStores({
-                includeMemory: input.includeMemory,
-                includeTasks: input.includeTasks,
-                includeAgents: input.includeAgents,
-            });
-            // Calculate stats
-            const stats = {
-                tasks: data.tasks ? Object.keys(data.tasks.tasks || {}).length : 0,
-                agents: data.agents ? Object.keys(data.agents.agents || {}).length : 0,
-                memoryEntries: data.memory ? Object.keys(data.memory.entries || {}).length : 0,
-                totalSize: 0,
-            };
-            const session = {
-                sessionId,
-                name: sessionName,
-                description: sessionDesc,
-                savedAt: new Date().toISOString(),
-                stats,
-                data: Object.keys(data).length > 0 ? data : undefined,
-            };
-            // Calculate size
-            const sessionJson = JSON.stringify(session);
-            session.stats.totalSize = Buffer.byteLength(sessionJson, 'utf-8');
-            saveSession(session);
-            return {
-                sessionId,
-                name: session.name,
-                savedAt: session.savedAt,
-                stats: session.stats,
-            };
-        },
-    },
-    {
-        name: 'session_restore',
-        description: 'Restore a saved session',
-        category: 'session',
-        inputSchema: {
-            type: 'object',
-            properties: {
-                sessionId: { type: 'string', description: 'Session ID to restore' },
-                name: { type: 'string', description: 'Session name to restore' },
-            },
-        },
-        handler: async (input) => {
-            let session = null;
-            // Try to find by sessionId first
-            if (input.sessionId) {
-                session = loadSession(input.sessionId);
-            }
-            // Try to find by name if sessionId not found
-            if (!session && input.name) {
-                const sessions = listSessions();
-                session = sessions.find(s => s.name === input.name) || null;
-            }
-            // Try to find latest if no params
-            if (!session && !input.sessionId && !input.name) {
-                const sessions = listSessions();
-                if (sessions.length > 0) {
-                    sessions.sort((a, b) => new Date(b.savedAt).getTime() - new Date(a.savedAt).getTime());
-                    session = sessions[0];
-                }
-            }
-            if (session) {
-                // Restore data to respective stores (legacy JSON for backward compat)
-                if (session.data?.memory) {
-                    const memoryDir = join(getMonomindDataRoot(), 'memory');
-                    if (!existsSync(memoryDir))
-                        mkdirSync(memoryDir, { recursive: true });
-                    const memoryStorePath = join(memoryDir, 'store.json');
-                    {
-                        const tmp = `${memoryStorePath}.${process.pid}.${Date.now()}.tmp`;
-                        writeFileSync(tmp, JSON.stringify(session.data.memory, null, 2), 'utf-8');
-                        renameSync(tmp, memoryStorePath);
-                    }
-                    // Also populate active sql.js SQLite database so memory-tools can find entries
-                    try {
-                        const { storeEntry } = await import('../memory/memory-initializer.js');
-                        const memoryData = session.data.memory;
-                        if (memoryData.entries) {
-                            // Cap individual key and value lengths before writing to the DB.
-                            // A malicious or corrupted session file could contain arbitrarily
-                            // long strings; without caps these flow straight into the HNSW
-                            // embedder and SQL layer, causing OOM or DoS.
-                            const MAX_RESTORE_KEY = 1_000;
-                            const MAX_RESTORE_VALUE = 100_000;
-                            const MAX_RESTORE_NS = 200;
-                            for (const entry of Object.values(memoryData.entries)) {
-                                let key = entry.key || entry.id || '';
-                                let value = entry.value || entry.content || '';
-                                if (!key || !value)
-                                    continue;
-                                if (key.length > MAX_RESTORE_KEY)
-                                    key = key.slice(0, MAX_RESTORE_KEY);
-                                if (value.length > MAX_RESTORE_VALUE)
-                                    value = value.slice(0, MAX_RESTORE_VALUE);
-                                const rawNs = entry.namespace || 'restored';
-                                const namespace = rawNs.length > MAX_RESTORE_NS ? rawNs.slice(0, MAX_RESTORE_NS) : rawNs;
-                                await storeEntry({ key, value, namespace, upsert: true });
-                            }
-                        }
-                    }
-                    catch {
-                        // Legacy JSON restore is the fallback -- sql.js import may not be available
-                    }
-                }
-                if (session.data?.tasks) {
-                    const taskDir = join(getMonomindDataRoot(), 'tasks');
-                    if (!existsSync(taskDir))
-                        mkdirSync(taskDir, { recursive: true });
-                    const taskStorePath = join(taskDir, 'store.json');
-                    {
-                        const tmp = `${taskStorePath}.${process.pid}.${Date.now()}.tmp`;
-                        writeFileSync(tmp, JSON.stringify(session.data.tasks, null, 2), 'utf-8');
-                        renameSync(tmp, taskStorePath);
-                    }
-                }
-                if (session.data?.agents) {
-                    const agentDir = join(getMonomindDataRoot(), 'agents');
-                    if (!existsSync(agentDir))
-                        mkdirSync(agentDir, { recursive: true });
-                    const agentStorePath = join(agentDir, 'store.json');
-                    {
-                        const tmp = `${agentStorePath}.${process.pid}.${Date.now()}.tmp`;
-                        writeFileSync(tmp, JSON.stringify(session.data.agents, null, 2), 'utf-8');
-                        renameSync(tmp, agentStorePath);
-                    }
-                }
-                return {
-                    sessionId: session.sessionId,
-                    name: session.name,
-                    restored: true,
-                    restoredAt: new Date().toISOString(),
-                    stats: session.stats,
-                };
-            }
-            return {
-                sessionId: input.sessionId || input.name || 'latest',
-                restored: false,
-                error: 'Session not found',
-            };
-        },
-    },
-    {
-        name: 'session_list',
-        description: 'List saved sessions',
-        category: 'session',
-        inputSchema: {
-            type: 'object',
-            properties: {
-                limit: { type: 'number', description: 'Maximum sessions to return' },
-                sortBy: { type: 'string', description: 'Sort field (date, name, size)' },
-            },
-        },
-        handler: async (input) => {
-            let sessions = listSessions();
-            // Sort
-            const sortBy = input.sortBy || 'date';
-            if (sortBy === 'date') {
-                sessions.sort((a, b) => new Date(b.savedAt).getTime() - new Date(a.savedAt).getTime());
-            }
-            else if (sortBy === 'name') {
-                sessions.sort((a, b) => a.name.localeCompare(b.name));
-            }
-            else if (sortBy === 'size') {
-                sessions.sort((a, b) => b.stats.totalSize - a.stats.totalSize);
-            }
-            // Apply limit — clamp to [1, 200] to prevent negative-slice and OOM
-            const rawLimit = typeof input.limit === 'number' ? input.limit : 10;
-            const limit = Math.max(1, Math.min(rawLimit, 200));
-            const totalCount = sessions.length;
-            sessions = sessions.slice(0, limit);
-            return {
-                sessions: sessions.map(s => ({
-                    sessionId: s.sessionId,
-                    name: s.name,
-                    description: s.description,
-                    savedAt: s.savedAt,
-                    stats: s.stats,
-                })),
-                total: totalCount,
-                limit,
-            };
-        },
-    },
-    {
-        name: 'session_delete',
-        description: 'Delete a saved session',
-        category: 'session',
-        inputSchema: {
-            type: 'object',
-            properties: {
-                sessionId: { type: 'string', description: 'Session ID to delete' },
-            },
-            required: ['sessionId'],
-        },
-        handler: async (input) => {
-            const sessionId = input.sessionId;
-            const path = getSessionPath(sessionId);
-            if (existsSync(path)) {
-                unlinkSync(path);
-                return {
-                    sessionId,
-                    deleted: true,
-                    deletedAt: new Date().toISOString(),
-                };
-            }
-            return {
-                sessionId,
-                deleted: false,
-                error: 'Session not found',
-            };
-        },
-    },
-    {
-        name: 'session_info',
-        description: 'Get detailed session information',
-        category: 'session',
-        inputSchema: {
-            type: 'object',
-            properties: {
-                sessionId: { type: 'string', description: 'Session ID (defaults to the most recently saved session)' },
-                includeStats: { type: 'boolean', description: 'Include per-session statistics in the response' },
-            },
-            // `sessionId` is deliberately NOT required — it defaults to the most
-            // recent session, which is what the `session current` CLI subcommand
-            // asks for. It used to be declared required while the CLI called this
-            // tool with no id at all; nothing enforced the declaration, so instead
-            // of an error the undefined id reached getSessionPath(), threw a
-            // TypeError on `.replace`, and was swallowed by loadSession()'s catch.
-            // The net effect was that `session current` could never succeed — it
-            // always reported "Session not found".
-        },
-        handler: async (input) => {
-            const sessionId = input.sessionId
-                ?? listSessions()
-                    .sort((a, b) => new Date(b.savedAt).getTime() - new Date(a.savedAt).getTime())[0]?.sessionId;
-            if (!sessionId) {
-                return { sessionId: null, error: 'No saved sessions found' };
-            }
-            const session = loadSession(sessionId);
-            if (session) {
-                const path = getSessionPath(sessionId);
-                // Guard against TOCTOU: the file could be deleted between loadSession()
-                // and statSync().  Catch ENOENT (and any other fs error) so the MCP
-                // handler never throws an unhandled exception; callers get a clean
-                // response instead of a server-side crash.
-                let fileSize = 0;
-                try {
-                    fileSize = statSync(path).size;
-                }
-                catch {
-                    // File deleted or inaccessible after loadSession succeeded
-                }
-                return {
-                    sessionId: session.sessionId,
-                    name: session.name,
-                    description: session.description,
-                    savedAt: session.savedAt,
-                    stats: session.stats,
-                    fileSize,
-                    hasData: {
-                        memory: !!session.data?.memory,
-                        tasks: !!session.data?.tasks,
-                        agents: !!session.data?.agents,
-                    },
-                };
-            }
-            return {
-                sessionId,
-                error: 'Session not found',
-            };
-        },
-    },
-];
-//# sourceMappingURL=session-tools.js.map

package/packages/@monomind/cli/dist/src/mcp-tools/swarm-tools.d.ts

@@ -1,9 +0,0 @@
-/**
- * Swarm MCP Tools for CLI
- *
- * Tool definitions for swarm coordination with file-based state persistence.
- * Replaces previous stub implementations with real state tracking.
- */
-import { type MCPTool } from './types.js';
-export declare const swarmTools: MCPTool[];
-//# sourceMappingURL=swarm-tools.d.ts.map