qiksy 1.0.0

package/tools/travel/vendor/scripts/approver-mcp.mjs

@@ -0,0 +1,80 @@
+#!/usr/bin/env node
+/**
+ * Minimal MCP stdio server: permission-prompt handler for headless agents.
+ *
+ * The user's global ~/.claude/settings.json puts WebSearch/WebFetch in the
+ * "ask" list; in -p mode "ask" becomes "deny". This server is passed via
+ * `--permission-prompt-tool mcp__approver__approve` and auto-approves only
+ * the whitelisted tools below — everything else stays denied.
+ *
+ * Домен: агентам можно искать и читать веб + водить браузер (playwright);
+ * всё деструктивное (Bash/Edit/Write и произвольный JS в браузере) — deny.
+ */
+// DENY wins over the broad playwright ALLOW: block arbitrary in-page JS
+// (evaluate/run_code_unsafe) and file uploads even though playwright is allowed.
+const DENY = [
+  /^mcp__playwright__browser_run_code_unsafe$/,
+  /^mcp__playwright__browser_evaluate$/,
+  /^mcp__playwright__browser_file_upload$/,
+];
+const ALLOW = [/^WebSearch$/, /^WebFetch$/, /^ToolSearch$/, /^mcp__playwright__/];
+
+const send = msg => process.stdout.write(JSON.stringify(msg) + '\n');
+
+function handle(msg) {
+  const { id, method, params } = msg;
+  if (method === 'initialize') {
+    return send({
+      jsonrpc: '2.0', id,
+      result: {
+        protocolVersion: params?.protocolVersion || '2024-11-05',
+        capabilities: { tools: {} },
+        serverInfo: { name: 'approver', version: '1.0.0' },
+      },
+    });
+  }
+  if (method === 'tools/list') {
+    return send({
+      jsonrpc: '2.0', id,
+      result: {
+        tools: [{
+          name: 'approve',
+          description: 'Auto-approve permission prompts for whitelisted tools',
+          inputSchema: {
+            type: 'object',
+            properties: {
+              tool_name: { type: 'string' },
+              input: { type: 'object' },
+              tool_use_id: { type: 'string' },
+            },
+            required: ['tool_name', 'input'],
+          },
+        }],
+      },
+    });
+  }
+  if (method === 'tools/call') {
+    const { name, arguments: args = {} } = params || {};
+    if (name !== 'approve') return send({ jsonrpc: '2.0', id, error: { code: -32601, message: 'unknown tool' } });
+    const tool = args.tool_name || '';
+    const ok = !DENY.some(re => re.test(tool)) && ALLOW.some(re => re.test(tool));
+    const payload = ok
+      ? { behavior: 'allow', updatedInput: args.input || {} }
+      : { behavior: 'deny', message: `tool ${tool} is not whitelisted for travel-assistant agents` };
+    return send({ jsonrpc: '2.0', id, result: { content: [{ type: 'text', text: JSON.stringify(payload) }] } });
+  }
+  if (id !== undefined) send({ jsonrpc: '2.0', id, result: {} });
+}
+
+let buf = '';
+process.stdin.setEncoding('utf8');
+process.stdin.on('data', chunk => {
+  buf += chunk;
+  let nl;
+  while ((nl = buf.indexOf('\n')) >= 0) {
+    const line = buf.slice(0, nl).trim();
+    buf = buf.slice(nl + 1);
+    if (!line) continue;
+    try { handle(JSON.parse(line)); } catch { /* ignore malformed line */ }
+  }
+});

package/tools/travel/vendor/scripts/launch-browser.mjs

@@ -0,0 +1,77 @@
+#!/usr/bin/env node
+/**
+ * Ensure a CDP Chrome is up on :9222 (калька с work-finder).
+ *
+ * If something already listens on the port — reuse it. Otherwise launch
+ * Chrome with travel-assistant's own persistent profile
+ * (.cdp-browser-profile/, git-ignored), so logins survive restarts.
+ *
+ * Env overrides: CHROME_PATH, CDP_PORT (default 9222), TA_HEADLESS=1
+ */
+import { spawn } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import { resolve, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const PORT = Number(process.env.CDP_PORT) || 9222;
+const ROOT = resolve(dirname(fileURLToPath(import.meta.url)), '..');
+const PROFILE_DIR = resolve(ROOT, '.cdp-browser-profile');
+
+const CHROME_CANDIDATES = {
+  darwin: [
+    '/Applications/Google Chrome.app/Contents/MacOS/Google Chrome',
+    '/Applications/Google Chrome Canary.app/Contents/MacOS/Google Chrome Canary',
+  ],
+  linux: ['/usr/bin/google-chrome', '/usr/bin/google-chrome-stable', '/usr/bin/chromium'],
+  win32: [
+    process.env.LOCALAPPDATA ? `${process.env.LOCALAPPDATA}\\Google\\Chrome\\Application\\chrome.exe` : null,
+    'C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe',
+  ].filter(Boolean),
+};
+
+async function probeCDP() {
+  try {
+    const res = await fetch(`http://localhost:${PORT}/json/version`, { signal: AbortSignal.timeout(1500) });
+    return res.ok;
+  } catch {
+    return false;
+  }
+}
+
+export async function ensureBrowser() {
+  if (await probeCDP()) {
+    console.error(`[browser] CDP already up on :${PORT}, reusing.`);
+    return true;
+  }
+  const chromePath = process.env.CHROME_PATH
+    || (CHROME_CANDIDATES[process.platform] || []).find(p => existsSync(p));
+  if (!chromePath) {
+    console.error('[browser] Chrome not found; set CHROME_PATH.');
+    return false;
+  }
+  const headless = /^(1|true)$/i.test(process.env.TA_HEADLESS || '');
+  const args = [
+    `--remote-debugging-port=${PORT}`,
+    `--user-data-dir=${PROFILE_DIR}`,
+    '--no-first-run',
+    ...(headless ? ['--headless=new', '--disable-gpu'] : []),
+  ];
+  console.error(`[browser] Launching Chrome${headless ? ' (headless)' : ''} on :${PORT}…`);
+  const child = spawn(chromePath, args, { detached: true, stdio: 'ignore' });
+  child.unref();
+  const t0 = Date.now();
+  while (Date.now() - t0 < 15_000) {
+    if (await probeCDP()) {
+      console.error('[browser] Ready.');
+      return true;
+    }
+    await new Promise(r => setTimeout(r, 300));
+  }
+  console.error(`[browser] Chrome did not respond on :${PORT} within 15s.`);
+  return false;
+}
+
+if (import.meta.url === `file://${process.argv[1]}`) {
+  const ok = await ensureBrowser();
+  process.exit(ok ? 0 : 1);
+}