mstro-app 0.1.47

package/dist/server/mcp/security-patterns.js

@@ -0,0 +1,247 @@
+// Copyright (c) 2025-present Mstro, Inc. All rights reserved.
+// Licensed under the MIT License. See LICENSE file for details.
+/**
+ * Sensitive paths that require AI context review
+ * These aren't auto-denied - they need context analysis to determine intent
+ */
+export const SENSITIVE_PATHS = [
+    // System directories - might be legitimate (e.g., user asked to configure something)
+    { pattern: /^(Write|Edit):\s*\/etc\//i, reason: 'System configuration - verify user intent' },
+    { pattern: /^(Write|Edit):\s*\/(bin|sbin|usr\/bin|usr\/sbin)\//i, reason: 'System binaries - verify user intent' },
+    { pattern: /^(Write|Edit):\s*\/boot\//i, reason: 'Boot directory - verify user intent' },
+    { pattern: /^(Write|Edit):\s*\/root\//i, reason: 'Root home - verify user intent' },
+    { pattern: /^(Write|Edit):\s*\/System\//i, reason: 'macOS system - verify user intent' },
+    { pattern: /^(Write|Edit):\s*\/Library\/(LaunchDaemons|LaunchAgents)\//i, reason: 'macOS launch services - verify user intent' },
+    // Credential/security files - high sensitivity, need clear user intent
+    { pattern: /^(Write|Edit):\s*.*\/\.ssh\//i, reason: 'SSH configuration - verify user intent' },
+    { pattern: /^(Write|Edit):\s*.*\/\.gnupg\//i, reason: 'GPG keys - verify user intent' },
+    { pattern: /^(Write|Edit):\s*.*\/\.aws\/(credentials|config)/i, reason: 'AWS credentials - verify user intent' },
+    { pattern: /^(Write|Edit):\s*.*\/(\.env|\.env\.local|\.env\.production)$/i, reason: 'Environment secrets - verify user intent' },
+    // Shell profiles - common legitimate edits but also attack vector
+    { pattern: /^(Write|Edit):\s*.*\/(\.bash_profile|\.bashrc|\.zshrc|\.profile|\.zprofile)$/i, reason: 'Shell profile - verify user intent' },
+];
+/**
+ * Critical threats - auto-deny regardless of context
+ *
+ * These are NOT about "dangerous commands" but about commands that:
+ * 1. Are NEVER legitimate in any dev workflow
+ * 2. Have catastrophic, irreversible consequences
+ * 3. The cost of false positive (blocking) is negligible
+ *
+ * Note: Most "dangerous" commands (curl|bash, rm -rf, sudo) go to Haiku
+ * for context review. Only truly never-legitimate commands are here.
+ */
+export const CRITICAL_THREATS = [
+    // Deleting root or home - no legitimate dev task requires this
+    // If user really wants this, they can run it manually outside Claude
+    {
+        pattern: /rm\s+-rf\s+(\/|~)($|\s)/i,
+        reason: 'Deleting root (/) or home (~) directory is never a legitimate dev task'
+    },
+    {
+        pattern: /:\(\)\{.*\}|:\(\)\{.*:\|:/i,
+        reason: 'Fork bomb detected - would cause system resource exhaustion'
+    },
+    {
+        pattern: /dd\s+if=\/dev\/zero\s+of=\/dev\/sd/i,
+        reason: 'Attempting to overwrite disk device - would destroy data'
+    },
+    {
+        pattern: /mkfs\./i,
+        reason: 'Attempting to format filesystem - would destroy all data'
+    },
+    {
+        pattern: /eval.*\$\(.*base64.*\)/i,
+        reason: 'Obfuscated code execution via base64 - common malware technique'
+    },
+    {
+        pattern: />\s*\/dev\/sd[a-z]/i,
+        reason: 'Direct write to disk device - would corrupt filesystem'
+    },
+    {
+        pattern: /chmod\s+000\s+\//i,
+        reason: 'Attempting to make system directories inaccessible'
+    }
+    // NOTE: curl|bash is NOT here - it goes to Haiku for context review
+    // The question is "did a bad actor inject this?" not "is curl|bash dangerous?"
+];
+/**
+ * Safe operations that can be immediately allowed (confidence: 95%)
+ * These are read-only or obviously safe operations that don't need context review
+ */
+export const SAFE_OPERATIONS = [
+    // Read operations are always safe - no side effects
+    { pattern: /^Read:/i },
+    { pattern: /^Glob:/i },
+    { pattern: /^Grep:/i },
+    // Write/Edit to user home directory or subdirectories - user requested, allow it
+    // Excludes system paths which go through critical threats check
+    { pattern: /^Write:\s*\/Users\/[^/]+\//i }, // macOS home dirs - Write
+    { pattern: /^Edit:\s*\/Users\/[^/]+\//i }, // macOS home dirs - Edit
+    { pattern: /^Write:\s*\/home\/[^/]+\//i }, // Linux home dirs - Write
+    { pattern: /^Edit:\s*\/home\/[^/]+\//i }, // Linux home dirs - Edit
+    // Safe bash commands - common development workflows
+    // NOTE: curl|bash goes to Haiku for context review, not auto-allowed
+    { pattern: /^Bash:\s*(npm|yarn|pnpm|bun)\s+(install|ci|run|test|build|dev|start|lint|format)($|\s)/i },
+    { pattern: /^Bash:\s*git\s+(status|log|diff|show|branch|clone|pull|fetch|add|stash|checkout)($|\s)/i },
+    { pattern: /^Bash:\s*docker\s+(build|run|ps|logs|compose|images)($|\s)/i },
+    { pattern: /^Bash:\s*(pytest|cargo\s+(build|test|run|check)|go\s+(build|test|run|mod))($|\s)/i },
+    { pattern: /^Bash:\s*(mkdir|cd|ls|pwd|cat|head|tail|wc|sort|uniq|grep|find|which|echo|env)($|\s)/i },
+    // Cleanup of build artifacts - always safe, commonly requested
+    { pattern: /^Bash:\s*rm\s+-rf\s+(\.\/)?node_modules($|\s)/i },
+    { pattern: /^Bash:\s*rm\s+-rf\s+(\.\/)?dist($|\s)/i },
+    { pattern: /^Bash:\s*rm\s+-rf\s+(\.\/)?build($|\s)/i },
+    { pattern: /^Bash:\s*rm\s+-rf\s+(\.\/)?\.cache($|\s)/i },
+    { pattern: /^Bash:\s*rm\s+-rf\s+(\.\/)?\.next($|\s)/i },
+    { pattern: /^Bash:\s*rm\s+-rf\s+(\.\/)?target($|\s)/i },
+    { pattern: /^Bash:\s*rm\s+-rf\s+(\.\/)?__pycache__($|\s)/i },
+    // Write/Edit to temp directories - ephemeral, low risk
+    { pattern: /^(Write|Edit):\s*\/tmp\//i },
+    { pattern: /^(Write|Edit):\s*\/var\/tmp\//i },
+];
+/**
+ * Patterns that trigger AI context review
+ * These operations need context analysis to determine if they align with user intent
+ *
+ * The AI should consider:
+ * 1. Did the user explicitly request this operation?
+ * 2. Does it make sense given the task at hand?
+ * 3. Is the content/action appropriate for the target?
+ */
+export const NEEDS_AI_REVIEW = [
+    // Remote code execution patterns
+    {
+        pattern: /(curl|wget).*\|.*(?:bash|sh)/i,
+        reason: 'Pipe to shell - verify source is trusted and user intended this'
+    },
+    // Elevated privileges
+    {
+        pattern: /sudo/i,
+        reason: 'Elevated privileges - verify user intended this action'
+    },
+    // Destructive operations (except safe build artifact cleanup)
+    {
+        pattern: /rm\s+-rf/i,
+        reason: 'Recursive deletion - verify target matches user intent'
+    },
+    // ALL Write/Edit operations that aren't to /tmp go through context review
+    // This is the key change: we review based on context, not blanket allow/deny
+    {
+        pattern: /^(Write|Edit):\s*(?!\/tmp\/|\/var\/tmp\/)/i,
+        reason: 'File modification - verify aligns with user request'
+    },
+];
+/**
+ * Check if operation matches any pattern in array
+ */
+export function matchesPattern(operation, patterns) {
+    for (const pattern of patterns) {
+        if (pattern.pattern.test(operation)) {
+            return pattern;
+        }
+    }
+    return null;
+}
+/**
+ * Determine if operation requires AI context review
+ *
+ * The philosophy here is:
+ * - SAFE_OPERATIONS: No review needed (read-only, temp files, build artifact cleanup)
+ * - CRITICAL_THREATS: Auto-deny, no review (catastrophic operations)
+ * - Everything else: AI reviews context to determine if it matches user intent
+ */
+const SAFE_RM_PATTERNS = [
+    /rm\s+-rf\s+(\.\/)?node_modules($|\s)/i,
+    /rm\s+-rf\s+(\.\/)?dist($|\s)/i,
+    /rm\s+-rf\s+(\.\/)?build($|\s)/i,
+    /rm\s+-rf\s+(\.\/)?\.cache($|\s)/i,
+    /rm\s+-rf\s+(\.\/)?\.next($|\s)/i,
+    /rm\s+-rf\s+(\.\/)?target($|\s)/i,
+    /rm\s+-rf\s+(\.\/)?__pycache__($|\s)/i,
+];
+export function requiresAIReview(operation) {
+    if (matchesPattern(operation, SAFE_OPERATIONS))
+        return false;
+    if (matchesPattern(operation, CRITICAL_THREATS))
+        return false;
+    if (matchesPattern(operation, NEEDS_AI_REVIEW)) {
+        return !SAFE_RM_PATTERNS.some(p => p.test(operation));
+    }
+    if (/\$\{.*\}|\$\(.*\)/.test(operation) || /\*\*?/.test(operation))
+        return true;
+    if (/^Bash:\s*\.\//.test(operation))
+        return true;
+    return false;
+}
+/**
+ * Check if operation targets a sensitive path
+ * Used to provide additional context to AI reviewer
+ */
+export function isSensitivePath(operation) {
+    return matchesPattern(operation, SENSITIVE_PATHS);
+}
+/**
+ * Classify operation risk level for context-aware review
+ *
+ * Risk levels indicate how much scrutiny the AI should apply:
+ * - critical: Catastrophic if wrong (rm -rf /, fork bombs) - auto-deny
+ * - high: Needs clear user intent (sudo, sensitive paths, credentials)
+ * - medium: Normal file operations - verify matches user request
+ * - low: Safe operations - minimal review needed
+ */
+export function classifyRisk(operation) {
+    // Critical threats are auto-denied
+    const criticalThreat = matchesPattern(operation, CRITICAL_THREATS);
+    if (criticalThreat) {
+        return {
+            isDestructive: true,
+            riskLevel: 'critical',
+            reasons: [criticalThreat.reason || 'Critical threat detected']
+        };
+    }
+    // Sensitive paths need high scrutiny but aren't auto-denied
+    const sensitivePath = matchesPattern(operation, SENSITIVE_PATHS);
+    if (sensitivePath) {
+        return {
+            isDestructive: false, // Not inherently destructive, just sensitive
+            riskLevel: 'high',
+            reasons: [sensitivePath.reason || 'Sensitive path - requires clear user intent']
+        };
+    }
+    // Other patterns that need elevated review
+    const elevatedPatterns = [
+        { pattern: /sudo/i, reason: 'Elevated privileges requested' },
+        { pattern: /DROP\s+(TABLE|DATABASE)/i, reason: 'Database deletion' },
+        { pattern: /chmod\s+777/i, reason: 'Dangerous permissions' },
+        { pattern: /(curl|wget).*\|.*(bash|sh)/i, reason: 'Remote code execution' },
+        { pattern: /pkill|killall/i, reason: 'Process termination' },
+    ];
+    for (const pattern of elevatedPatterns) {
+        if (pattern.pattern.test(operation)) {
+            return {
+                isDestructive: true,
+                riskLevel: 'high',
+                reasons: [pattern.reason || 'Elevated risk operation']
+            };
+        }
+    }
+    // Medium risk: only recursive deletions outside safe dirs
+    // NOTE: Write/Edit are NOT flagged as risky - they're normal dev operations
+    if (/rm\s+-rf/i.test(operation)) {
+        // Check if it's actually safe (build artifacts, temp)
+        if (matchesPattern(operation, SAFE_OPERATIONS)) {
+            return { isDestructive: false, riskLevel: 'low', reasons: [] };
+        }
+        return {
+            isDestructive: true,
+            riskLevel: 'medium',
+            reasons: ['Recursive deletion']
+        };
+    }
+    return {
+        isDestructive: false,
+        riskLevel: 'low',
+        reasons: []
+    };
+}
+//# sourceMappingURL=security-patterns.js.map

package/dist/server/mcp/security-patterns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-patterns.js","sourceRoot":"","sources":["../../../server/mcp/security-patterns.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,gEAAgE;AAoBhE;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAsB;IAChD,qFAAqF;IACrF,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,2CAA2C,EAAE;IAC7F,EAAE,OAAO,EAAE,qDAAqD,EAAE,MAAM,EAAE,sCAAsC,EAAE;IAClH,EAAE,OAAO,EAAE,4BAA4B,EAAE,MAAM,EAAE,qCAAqC,EAAE;IACxF,EAAE,OAAO,EAAE,4BAA4B,EAAE,MAAM,EAAE,gCAAgC,EAAE;IACnF,EAAE,OAAO,EAAE,8BAA8B,EAAE,MAAM,EAAE,mCAAmC,EAAE;IACxF,EAAE,OAAO,EAAE,6DAA6D,EAAE,MAAM,EAAE,4CAA4C,EAAE;IAEhI,uEAAuE;IACvE,EAAE,OAAO,EAAE,+BAA+B,EAAE,MAAM,EAAE,wCAAwC,EAAE;IAC9F,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,+BAA+B,EAAE;IACvF,EAAE,OAAO,EAAE,mDAAmD,EAAE,MAAM,EAAE,sCAAsC,EAAE;IAChH,EAAE,OAAO,EAAE,+DAA+D,EAAE,MAAM,EAAE,0CAA0C,EAAE;IAEhI,kEAAkE;IAClE,EAAE,OAAO,EAAE,+EAA+E,EAAE,MAAM,EAAE,oCAAoC,EAAE;CAC3I,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAsB;IACjD,+DAA+D;IAC/D,qEAAqE;IACrE;QACE,OAAO,EAAE,0BAA0B;QACnC,MAAM,EAAE,wEAAwE;KACjF;IACD;QACE,OAAO,EAAE,4BAA4B;QACrC,MAAM,EAAE,6DAA6D;KACtE;IACD;QACE,OAAO,EAAE,qCAAqC;QAC9C,MAAM,EAAE,0DAA0D;KACnE;IACD;QACE,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,0DAA0D;KACnE;IACD;QACE,OAAO,EAAE,yBAAyB;QAClC,MAAM,EAAE,iEAAiE;KAC1E;IACD;QACE,OAAO,EAAE,qBAAqB;QAC9B,MAAM,EAAE,wDAAwD;KACjE;IACD;QACE,OAAO,EAAE,mBAAmB;QAC5B,MAAM,EAAE,oDAAoD;KAC7D;IACD,oEAAoE;IACpE,+EAA+E;CAChF,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAsB;IAChD,oDAAoD;IACpD,EAAE,OAAO,EAAE,SAAS,EAAE;IACtB,EAAE,OAAO,EAAE,SAAS,EAAE;IACtB,EAAE,OAAO,EAAE,SAAS,EAAE;IAEtB,iFAAiF;IACjF,gEAAgE;IAChE,EAAE,OAAO,EAAE,6BAA6B,EAAE,EAAG,0BAA0B;IACvE,EAAE,OAAO,EAAE,4BAA4B,EAAE,EAAI,yBAAyB;IACtE,EAAE,OAAO,EAAE,4BAA4B,EAAE,EAAI,0BAA0B;IACvE,EAAE,OAAO,EAAE,2BAA2B,EAAE,EAAK,yBAAyB;IAEtE,oDAAoD;IACpD,qEAAqE;IACrE,EAAE,OAAO,EAAE,yFAAyF,EAAE;IACtG,EAAE,OAAO,EAAE,yFAAyF,EAAE;IACtG,EAAE,OAAO,EAAE,6DAA6D,EAAE;IAC1E,EAAE,OAAO,EAAE,mFAAmF,EAAE;IAChG,EAAE,OAAO,EAAE,uFAAuF,EAAE;IAEpG,+DAA+D;IAC/D,EAAE,OAAO,EAAE,gDAAgD,EAAE;IAC7D,EAAE,OAAO,EAAE,wCAAwC,EAAE;IACrD,EAAE,OAAO,EAAE,yCAAyC,EAAE;IACtD,EAAE,OAAO,EAAE,2CAA2C,EAAE;IACxD,EAAE,OAAO,EAAE,0CAA0C,EAAE;IACvD,EAAE,OAAO,EAAE,0CAA0C,EAAE;IACvD,EAAE,OAAO,EAAE,+CAA+C,EAAE;IAE5D,uDAAuD;IACvD,EAAE,OAAO,EAAE,2BAA2B,EAAE;IACxC,EAAE,OAAO,EAAE,gCAAgC,EAAE;CAC9C,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,eAAe,GAAsB;IAChD,iCAAiC;IACjC;QACE,OAAO,EAAE,+BAA+B;QACxC,MAAM,EAAE,iEAAiE;KAC1E;IAED,sBAAsB;IACtB;QACE,OAAO,EAAE,OAAO;QAChB,MAAM,EAAE,wDAAwD;KACjE;IAED,8DAA8D;IAC9D;QACE,OAAO,EAAE,WAAW;QACpB,MAAM,EAAE,wDAAwD;KACjE;IAED,0EAA0E;IAC1E,6EAA6E;IAC7E;QACE,OAAO,EAAE,4CAA4C;QACrD,MAAM,EAAE,qDAAqD;KAC9D;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,QAA2B;IAC3E,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACpC,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,gBAAgB,GAAG;IACvB,uCAAuC;IACvC,+BAA+B;IAC/B,gCAAgC;IAChC,kCAAkC;IAClC,iCAAiC;IACjC,iCAAiC;IACjC,sCAAsC;CACvC,CAAC;AAEF,MAAM,UAAU,gBAAgB,CAAC,SAAiB;IAChD,IAAI,cAAc,CAAC,SAAS,EAAE,eAAe,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7D,IAAI,cAAc,CAAC,SAAS,EAAE,gBAAgB,CAAC;QAAE,OAAO,KAAK,CAAC;IAE9D,IAAI,cAAc,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,CAAC;QAC/C,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAChF,IAAI,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAEjD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,SAAiB;IAC/C,OAAO,cAAc,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,SAAiB;IAK5C,mCAAmC;IACnC,MAAM,cAAc,GAAG,cAAc,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IACnE,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO;YACL,aAAa,EAAE,IAAI;YACnB,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,CAAC,cAAc,CAAC,MAAM,IAAI,0BAA0B,CAAC;SAC/D,CAAC;IACJ,CAAC;IAED,4DAA4D;IAC5D,MAAM,aAAa,GAAG,cAAc,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACjE,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO;YACL,aAAa,EAAE,KAAK,EAAE,6CAA6C;YACnE,SAAS,EAAE,MAAM;YACjB,OAAO,EAAE,CAAC,aAAa,CAAC,MAAM,IAAI,6CAA6C,CAAC;SACjF,CAAC;IACJ,CAAC;IAED,2CAA2C;IAC3C,MAAM,gBAAgB,GAAsB;QAC1C,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,+BAA+B,EAAE;QAC7D,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,mBAAmB,EAAE;QACpE,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,uBAAuB,EAAE;QAC5D,EAAE,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,uBAAuB,EAAE;QAC3E,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,qBAAqB,EAAE;KAC7D,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;QACvC,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACpC,OAAO;gBACL,aAAa,EAAE,IAAI;gBACnB,SAAS,EAAE,MAAM;gBACjB,OAAO,EAAE,CAAC,OAAO,CAAC,MAAM,IAAI,yBAAyB,CAAC;aACvD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,0DAA0D;IAC1D,4EAA4E;IAC5E,IAAI,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,sDAAsD;QACtD,IAAI,cAAc,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,CAAC;YAC/C,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACjE,CAAC;QACD,OAAO;YACL,aAAa,EAAE,IAAI;YACnB,SAAS,EAAE,QAAQ;YACnB,OAAO,EAAE,CAAC,oBAAoB,CAAC;SAChC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,aAAa,EAAE,KAAK;QACpB,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,EAAE;KACZ,CAAC;AACJ,CAAC"}

package/dist/server/mcp/server.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env -S npx tsx
+export {};
+//# sourceMappingURL=server.d.ts.map

package/dist/server/mcp/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../server/mcp/server.ts"],"names":[],"mappings":""}

package/dist/server/mcp/server.js

@@ -0,0 +1,146 @@
+#!/usr/bin/env -S npx tsx
+// Copyright (c) 2025-present Mstro, Inc. All rights reserved.
+// Licensed under the MIT License. See LICENSE file for details.
+/**
+ * MCP Bouncer Server
+ *
+ * Provides permission approval/denial for Claude Code tool use via MCP protocol.
+ * Integrates with Mstro's existing bouncer-integration.ts for security analysis.
+ *
+ * Usage:
+ *   claude --print --permission-prompt-tool mcp__mstro-bouncer__approval_prompt \
+ *     --mcp-config mstro-bouncer-mcp.json \
+ *     "your prompt here"
+ */
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { CallToolRequestSchema, ListToolsRequestSchema, } from '@modelcontextprotocol/sdk/types.js';
+import { reviewOperation } from './bouncer-integration.js';
+// Create MCP server
+const server = new Server({
+    name: 'mstro-bouncer',
+    version: '1.0.0',
+}, {
+    capabilities: {
+        tools: {},
+    },
+});
+/**
+ * List available tools (required by MCP protocol)
+ */
+server.setRequestHandler(ListToolsRequestSchema, async () => {
+    return {
+        tools: [
+            {
+                name: 'approval_prompt',
+                description: 'Analyze and approve/deny tool use requests from Claude Code. Integrates with Mstro security bouncer for AI-powered risk analysis.',
+                inputSchema: {
+                    type: 'object',
+                    properties: {
+                        tool_name: {
+                            type: 'string',
+                            description: 'Name of the tool being requested (e.g., "Bash", "Write", "Read")',
+                        },
+                        input: {
+                            type: 'object',
+                            description: 'Tool input parameters as JSON object',
+                        },
+                    },
+                    required: ['tool_name', 'input'],
+                },
+            },
+        ],
+    };
+});
+/**
+ * Handle tool calls (approval_prompt)
+ */
+server.setRequestHandler(CallToolRequestSchema, async (request) => {
+    if (request.params.name !== 'approval_prompt') {
+        throw new Error(`Unknown tool: ${request.params.name}`);
+    }
+    const { tool_name, input } = request.params.arguments;
+    console.error(`[MCP Bouncer] Analyzing ${tool_name} request...`);
+    // Format operation string for bouncer analysis
+    // Example: "Bash: rm -rf node_modules"
+    let operationString = `${tool_name}:`;
+    // Extract file path with multiple property name support
+    // Claude Code may use file_path, filePath, or path depending on context
+    const getFilePath = (inp) => inp.file_path || inp.filePath || inp.path;
+    if (tool_name === 'Bash' && input.command) {
+        operationString += ` ${input.command}`;
+    }
+    else if (['Write', 'Edit', 'Read'].includes(tool_name)) {
+        const filePath = getFilePath(input);
+        operationString += filePath ? ` ${filePath}` : ` ${JSON.stringify(input)}`;
+    }
+    else {
+        // Generic format: include all input parameters
+        operationString += ` ${JSON.stringify(input)}`;
+    }
+    // Build bouncer request with context
+    const bouncerRequest = {
+        operation: operationString,
+        context: {
+            purpose: `Tool use request from Claude`,
+            workingDirectory: process.cwd(),
+            toolName: tool_name,
+            toolInput: input,
+        },
+    };
+    try {
+        // Use existing Mstro bouncer for analysis
+        const decision = await reviewOperation(bouncerRequest);
+        console.error(`[MCP Bouncer] Decision: ${decision.decision} (${decision.confidence}% confidence)`);
+        console.error(`[MCP Bouncer] Reasoning: ${decision.reasoning}`);
+        // Format response for Claude Code
+        const response = decision.decision === 'deny'
+            ? {
+                behavior: 'deny',
+                message: `🚫 ${decision.reasoning}${decision.alternative ? `\n\nAlternative: ${decision.alternative}` : ''}`,
+            }
+            : {
+                behavior: 'allow',
+                updatedInput: input,
+                message: decision.decision === 'warn_allow'
+                    ? `⚠️  Allowed with caution: ${decision.reasoning}`
+                    : undefined,
+            };
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify(response),
+                },
+            ],
+        };
+    }
+    catch (error) {
+        console.error(`[MCP Bouncer] Error: ${error.message}`);
+        // Fail-safe: deny on error
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: JSON.stringify({
+                        behavior: 'deny',
+                        message: `Security analysis failed: ${error.message}. Denying for safety.`,
+                    }),
+                },
+            ],
+        };
+    }
+});
+/**
+ * Start the MCP server
+ */
+async function main() {
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    console.error('[MCP Bouncer] Server started and ready');
+}
+main().catch((error) => {
+    console.error('[MCP Bouncer] Fatal error:', error);
+    process.exit(1);
+});
+//# sourceMappingURL=server.js.map

package/dist/server/mcp/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../server/mcp/server.ts"],"names":[],"mappings":";AACA,8DAA8D;AAC9D,gEAAgE;AAEhE;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAA6B,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAEtF,oBAAoB;AACpB,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB;IACE,IAAI,EAAE,eAAe;IACrB,OAAO,EAAE,OAAO;CACjB,EACD;IACE,YAAY,EAAE;QACZ,KAAK,EAAE,EAAE;KACV;CACF,CACF,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;IAC1D,OAAO;QACL,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,iBAAiB;gBACvB,WAAW,EAAE,mIAAmI;gBAChJ,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,SAAS,EAAE;4BACT,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,kEAAkE;yBAChF;wBACD,KAAK,EAAE;4BACL,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,sCAAsC;yBACpD;qBACF;oBACD,QAAQ,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC;iBACjC;aACF;SACF;KACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;IAChE,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,iBAAiB,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,SAG3C,CAAC;IAEF,OAAO,CAAC,KAAK,CAAC,2BAA2B,SAAS,aAAa,CAAC,CAAC;IAEjE,+CAA+C;IAC/C,uCAAuC;IACvC,IAAI,eAAe,GAAG,GAAG,SAAS,GAAG,CAAC;IAEtC,wDAAwD;IACxD,wEAAwE;IACxE,MAAM,WAAW,GAAG,CAAC,GAAwB,EAAE,EAAE,CAC/C,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC;IAE5C,IAAI,SAAS,KAAK,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAC1C,eAAe,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;IACzC,CAAC;SAAM,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACzD,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QACpC,eAAe,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;IAC7E,CAAC;SAAM,CAAC;QACN,+CAA+C;QAC/C,eAAe,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;IACjD,CAAC;IAED,qCAAqC;IACrC,MAAM,cAAc,GAAyB;QAC3C,SAAS,EAAE,eAAe;QAC1B,OAAO,EAAE;YACP,OAAO,EAAE,8BAA8B;YACvC,gBAAgB,EAAE,OAAO,CAAC,GAAG,EAAE;YAC/B,QAAQ,EAAE,SAAS;YACnB,SAAS,EAAE,KAAK;SACjB;KACF,CAAC;IAEF,IAAI,CAAC;QACH,0CAA0C;QAC1C,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,cAAc,CAAC,CAAC;QAEvD,OAAO,CAAC,KAAK,CAAC,2BAA2B,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,UAAU,eAAe,CAAC,CAAC;QACnG,OAAO,CAAC,KAAK,CAAC,4BAA4B,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;QAEhE,kCAAkC;QAClC,MAAM,QAAQ,GACZ,QAAQ,CAAC,QAAQ,KAAK,MAAM;YAC1B,CAAC,CAAC;gBACE,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,MAAM,QAAQ,CAAC,SAAS,GAC/B,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,oBAAoB,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EACtE,EAAE;aACH;YACH,CAAC,CAAC;gBACE,QAAQ,EAAE,OAAO;gBACjB,YAAY,EAAE,KAAK;gBACnB,OAAO,EACL,QAAQ,CAAC,QAAQ,KAAK,YAAY;oBAChC,CAAC,CAAC,6BAA6B,QAAQ,CAAC,SAAS,EAAE;oBACnD,CAAC,CAAC,SAAS;aAChB,CAAC;QAER,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;iBAC/B;aACF;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,wBAAwB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAEvD,2BAA2B;QAC3B,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACnB,QAAQ,EAAE,MAAM;wBAChB,OAAO,EAAE,6BAA6B,KAAK,CAAC,OAAO,uBAAuB;qBAC3E,CAAC;iBACH;aACF;SACF,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;GAEG;AACH,KAAK,UAAU,IAAI;IACjB,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;AAC1D,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;IACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/server/routes/files.d.ts

@@ -0,0 +1,9 @@
+/**
+ * File Routes
+ *
+ * Handles file listing and autocomplete.
+ */
+import { Hono } from 'hono';
+import type { FileService } from '../services/files.js';
+export declare function createFileRoutes(fileService: FileService): Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=files.d.ts.map

package/dist/server/routes/files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../../server/routes/files.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAEvD,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,WAAW,8EAgBxD"}

package/dist/server/routes/files.js

@@ -0,0 +1,24 @@
+// Copyright (c) 2025-present Mstro, Inc. All rights reserved.
+// Licensed under the MIT License. See LICENSE file for details.
+/**
+ * File Routes
+ *
+ * Handles file listing and autocomplete.
+ */
+import { Hono } from 'hono';
+export function createFileRoutes(fileService) {
+    const routes = new Hono();
+    routes.get('/', (c) => {
+        try {
+            const filter = c.req.query('filter') || '';
+            const baseDir = (c.req.query('baseDir') || 'scores');
+            const files = fileService.getAllFiles(baseDir, filter);
+            return c.json({ files });
+        }
+        catch (error) {
+            return c.json({ error: error.message }, 500);
+        }
+    });
+    return routes;
+}
+//# sourceMappingURL=files.js.map

package/dist/server/routes/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../../server/routes/files.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,gEAAgE;AAEhE;;;;GAIG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAG3B,MAAM,UAAU,gBAAgB,CAAC,WAAwB;IACvD,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAA;IAEzB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE;QACpB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAA;YAC1C,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAyB,CAAA;YAE5E,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YACtD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAG,KAAe,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAA;QACzD,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/server/routes/improvise.d.ts

@@ -0,0 +1,3 @@
+import { Hono } from 'hono';
+export declare function createImproviseRoutes(workingDir: string): Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=improvise.d.ts.map

package/dist/server/routes/improvise.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"improvise.d.ts","sourceRoot":"","sources":["../../../server/routes/improvise.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,8EAqEvD"}

package/dist/server/routes/improvise.js

@@ -0,0 +1,72 @@
+// Copyright (c) 2025-present Mstro, Inc. All rights reserved.
+// Licensed under the MIT License. See LICENSE file for details.
+/**
+ * Improvise History Routes
+ *
+ * Handles improvise session history retrieval.
+ */
+import { join } from 'node:path';
+import { Hono } from 'hono';
+export function createImproviseRoutes(workingDir) {
+    const routes = new Hono();
+    routes.get('/sessions', async (c) => {
+        try {
+            const sessionsDir = join(workingDir, '.mstro', 'improvise');
+            const { readdirSync, existsSync, readFileSync } = await import('node:fs');
+            if (!existsSync(sessionsDir)) {
+                return c.json({ sessions: [] });
+            }
+            // Look for history-*.json files in the improvise directory
+            const historyFiles = readdirSync(sessionsDir)
+                .filter((name) => name.startsWith('history-') && name.endsWith('.json'))
+                .sort((a, b) => {
+                // Sort by timestamp in filename (newer first)
+                const timestampA = parseInt(a.replace('history-', '').replace('.json', ''), 10);
+                const timestampB = parseInt(b.replace('history-', '').replace('.json', ''), 10);
+                return timestampB - timestampA;
+            });
+            const sessions = historyFiles.map((filename) => {
+                const historyPath = join(sessionsDir, filename);
+                try {
+                    const historyData = JSON.parse(readFileSync(historyPath, 'utf-8'));
+                    const firstPrompt = historyData.movements?.[0]?.userPrompt || '';
+                    return {
+                        sessionId: historyData.sessionId,
+                        startedAt: historyData.startedAt,
+                        lastActivityAt: historyData.lastActivityAt,
+                        totalTokens: historyData.totalTokens,
+                        movementCount: historyData.movements?.length || 0,
+                        title: firstPrompt.slice(0, 80) + (firstPrompt.length > 80 ? '...' : ''),
+                        movements: historyData.movements || []
+                    };
+                }
+                catch {
+                    return null;
+                }
+            }).filter(Boolean);
+            return c.json({ sessions });
+        }
+        catch (error) {
+            return c.json({ error: error.message }, 500);
+        }
+    });
+    routes.get('/sessions/:sessionId', async (c) => {
+        try {
+            const { sessionId } = c.req.param();
+            // Extract timestamp from sessionId (e.g., "improv-1234567890" -> "1234567890")
+            const timestamp = sessionId.replace('improv-', '');
+            const historyPath = join(workingDir, '.mstro', 'improvise', `history-${timestamp}.json`);
+            const { existsSync, readFileSync } = await import('node:fs');
+            if (!existsSync(historyPath)) {
+                return c.json({ error: 'Session not found' }, 404);
+            }
+            const historyData = JSON.parse(readFileSync(historyPath, 'utf-8'));
+            return c.json(historyData);
+        }
+        catch (error) {
+            return c.json({ error: error.message }, 500);
+        }
+    });
+    return routes;
+}
+//# sourceMappingURL=improvise.js.map

package/dist/server/routes/improvise.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"improvise.js","sourceRoot":"","sources":["../../../server/routes/improvise.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,gEAAgE;AAEhE;;;;GAIG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,MAAM,UAAU,qBAAqB,CAAC,UAAkB;IACtD,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAA;IAEzB,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClC,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAA;YAC3D,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAA;YAEzE,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC7B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAA;YACjC,CAAC;YAED,2DAA2D;YAC3D,MAAM,YAAY,GAAG,WAAW,CAAC,WAAW,CAAC;iBAC1C,MAAM,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;iBAC/E,IAAI,CAAC,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE;gBAC7B,8CAA8C;gBAC9C,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;gBAC/E,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;gBAC/E,OAAO,UAAU,GAAG,UAAU,CAAA;YAChC,CAAC,CAAC,CAAA;YAEJ,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,QAAgB,EAAE,EAAE;gBACrD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;gBAE/C,IAAI,CAAC;oBACH,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;oBAClE,MAAM,WAAW,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,IAAI,EAAE,CAAA;oBAEhE,OAAO;wBACL,SAAS,EAAE,WAAW,CAAC,SAAS;wBAChC,SAAS,EAAE,WAAW,CAAC,SAAS;wBAChC,cAAc,EAAE,WAAW,CAAC,cAAc;wBAC1C,WAAW,EAAE,WAAW,CAAC,WAAW;wBACpC,aAAa,EAAE,WAAW,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC;wBACjD,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;wBACxE,SAAS,EAAE,WAAW,CAAC,SAAS,IAAI,EAAE;qBACvC,CAAA;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,IAAI,CAAA;gBACb,CAAC;YACH,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YAElB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAG,KAAe,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAA;QACzD,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,CAAC,GAAG,CAAC,sBAAsB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7C,IAAI,CAAC;YACH,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAA;YACnC,+EAA+E;YAC/E,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;YAClD,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,SAAS,OAAO,CAAC,CAAA;YACxF,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAA;YAE5D,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC7B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAA;YACpD,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;YAClE,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAG,KAAe,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAA;QACzD,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/server/routes/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Routes Index
+ *
+ * Re-exports all route creators for easy importing.
+ */
+export { createFileRoutes } from './files.js';
+export { createImproviseRoutes } from './improvise.js';
+export { createInstanceRoutes, createShutdownRoute } from './instances.js';
+export { createNotificationRoutes } from './notifications.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/routes/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../server/routes/index.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAA;AACtD,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAA;AAC1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAA"}

package/dist/server/routes/index.js

@@ -0,0 +1,12 @@
+// Copyright (c) 2025-present Mstro, Inc. All rights reserved.
+// Licensed under the MIT License. See LICENSE file for details.
+/**
+ * Routes Index
+ *
+ * Re-exports all route creators for easy importing.
+ */
+export { createFileRoutes } from './files.js';
+export { createImproviseRoutes } from './improvise.js';
+export { createInstanceRoutes, createShutdownRoute } from './instances.js';
+export { createNotificationRoutes } from './notifications.js';
+//# sourceMappingURL=index.js.map

package/dist/server/routes/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../server/routes/index.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,gEAAgE;AAEhE;;;;GAIG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAA;AACtD,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAA;AAC1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAA"}

package/dist/server/routes/instances.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Instance Management Routes
+ *
+ * Handles server instance discovery and management.
+ */
+import { Hono } from 'hono';
+import { InstanceRegistry } from '../services/instances.js';
+export declare function createInstanceRoutes(instanceRegistry: InstanceRegistry): Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+export declare function createShutdownRoute(instanceRegistry: InstanceRegistry): Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=instances.d.ts.map

package/dist/server/routes/instances.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"instances.d.ts","sourceRoot":"","sources":["../../../server/routes/instances.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAE3D,wBAAgB,oBAAoB,CAAC,gBAAgB,EAAE,gBAAgB,8EAyBtE;AAED,wBAAgB,mBAAmB,CAAC,gBAAgB,EAAE,gBAAgB,8EAarE"}

package/dist/server/routes/instances.js

@@ -0,0 +1,47 @@
+// Copyright (c) 2025-present Mstro, Inc. All rights reserved.
+// Licensed under the MIT License. See LICENSE file for details.
+/**
+ * Instance Management Routes
+ *
+ * Handles server instance discovery and management.
+ */
+import { Hono } from 'hono';
+import { getClientId } from '../services/client-id.js';
+import { InstanceRegistry } from '../services/instances.js';
+export function createInstanceRoutes(instanceRegistry) {
+    const routes = new Hono();
+    routes.get('/', (c) => {
+        try {
+            const instances = InstanceRegistry.getAllInstances();
+            return c.json({ instances });
+        }
+        catch (error) {
+            return c.json({ error: error.message }, 500);
+        }
+    });
+    routes.get('/current', (c) => {
+        try {
+            const instance = instanceRegistry.getCurrentInstance();
+            return c.json({
+                instance,
+                clientId: getClientId()
+            });
+        }
+        catch (error) {
+            return c.json({ error: error.message }, 500);
+        }
+    });
+    return routes;
+}
+export function createShutdownRoute(instanceRegistry) {
+    const routes = new Hono();
+    routes.post('/', (c) => {
+        setTimeout(() => {
+            instanceRegistry.unregister();
+            process.exit(0);
+        }, 100);
+        return c.json({ success: true, message: 'Shutting down...' });
+    });
+    return routes;
+}
+//# sourceMappingURL=instances.js.map