negotium 0.1.7 → 0.1.8

package/dist/runtime/src/mcp/vault-server.ts

@@ -0,0 +1,104 @@
+#!/usr/bin/env node
+import "./stdio-protect";
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { z } from "zod";
+import { connectStdio, mcpError, mcpOk, parseUserIdArg } from "#mcp/mcp-helpers";
+import { executeVaultHttpRequest } from "#mcp/vault-http";
+import { executeVaultRun } from "#mcp/vault-run";
+import { vaultList } from "#storage/vault";
+
+const args = process.argv.slice(2);
+const userId = parseUserIdArg(args);
+const httpOnly = args.includes("--http-only=true");
+
+const server = new McpServer({
+  name: "vault",
+  version: "1.0.0",
+});
+
+server.tool(
+  "vault_list",
+  httpOnly
+    ? "List the user's Vault keys and descriptions without exposing values. Use vault_http_request for HTTPS APIs that need a credential."
+    : "List the user's Vault keys and descriptions without exposing values. Use vault_http_request for APIs and vault_run for shell/CLI work that needs a credential.",
+  {},
+  () => {
+    if (!userId) return mcpOk("(vault unavailable: no user context)");
+    const entries = vaultList(String(userId));
+    if (entries.length === 0) return mcpOk("Vault is empty. No keys stored yet.");
+    const lines = entries.map((e) =>
+      e.description ? `• ${e.key} — ${e.description}` : `• ${e.key}`,
+    );
+    return mcpOk(`Vault keys (${entries.length}):\n${lines.join("\n")}`);
+  },
+);
+
+if (!httpOnly) {
+  server.tool(
+    "vault_run",
+    "Run a shell command containing {{KEY}} references inside Otium's credential broker. Expanded command input never reaches the model/provider, and stdout/stderr are redacted before return. Prefer vault_http_request for HTTP APIs.",
+    {
+      command: z
+        .string()
+        .min(1)
+        .max(64 * 1024),
+      timeout_ms: z.number().int().min(1_000).max(600_000).optional(),
+      max_output_bytes: z
+        .number()
+        .int()
+        .min(1_024)
+        .max(2 * 1024 * 1024)
+        .optional(),
+    },
+    async ({ command, timeout_ms, max_output_bytes }) => {
+      if (!userId) return mcpError("Vault unavailable: no user context");
+      const result = await executeVaultRun(userId, {
+        command,
+        timeoutMs: timeout_ms,
+        maxOutputBytes: max_output_bytes,
+        cwd: process.cwd(),
+      });
+      return result.error && result.exitCode === null
+        ? mcpError(result.error)
+        : mcpOk(JSON.stringify(result, null, 2));
+    },
+  );
+}
+
+server.tool(
+  "vault_http_request",
+  "Make an HTTPS request with {{KEY}} references resolved inside Otium. Put secrets in headers or body, never in the URL. The expanded request is not returned; the response is redacted before the model sees it.",
+  {
+    method: z.enum(["GET", "POST", "PUT", "PATCH", "DELETE"]).default("GET"),
+    url: z.string().url().describe("Absolute HTTPS URL without Vault placeholders"),
+    headers: z
+      .record(z.string(), z.string())
+      .optional()
+      .describe('Request headers, for example {"Authorization":"Bearer {{GITHUB_TOKEN}}"}'),
+    body: z
+      .string()
+      .optional()
+      .describe("Optional text or JSON body containing {{KEY}} references"),
+    timeout_ms: z.number().int().min(1_000).max(120_000).optional(),
+    max_response_bytes: z
+      .number()
+      .int()
+      .min(1_024)
+      .max(1024 * 1024)
+      .optional(),
+  },
+  async ({ method, url, headers, body, timeout_ms, max_response_bytes }) => {
+    if (!userId) return mcpError("Vault unavailable: no user context");
+    const result = await executeVaultHttpRequest(userId, {
+      method,
+      url,
+      headers,
+      body,
+      timeoutMs: timeout_ms,
+      maxResponseBytes: max_response_bytes,
+    });
+    return result.error ? mcpError(result.error) : mcpOk(JSON.stringify(result, null, 2));
+  },
+);
+
+await connectStdio(server);