remote-access-mcp 1.0.0

package/dist/tools/http.js

@@ -0,0 +1,70 @@
+import net from 'node:net';
+import { z } from 'zod';
+const MAX_BODY = 512 * 1024;
+export function registerHttpTools(server) {
+    // ---- http_request ----------------------------------------------------------
+    server.registerTool('http_request', {
+        description: 'Outbound HTTP request from the server. Method, headers, body, 20s timeout.',
+        inputSchema: {
+            url: z.string().describe('Full URL including scheme'),
+            method: z.string().optional().default('GET').describe('HTTP method'),
+            headers: z.record(z.string()).optional().describe('Request headers'),
+            body: z.string().optional().describe('Request body (raw text)'),
+        },
+    }, async ({ url, method, headers, body }) => {
+        try {
+            const controller = new AbortController();
+            const timer = setTimeout(() => controller.abort(), 20_000);
+            const resp = await fetch(url, {
+                method,
+                headers,
+                body: body || undefined,
+                signal: controller.signal,
+                redirect: 'follow',
+            });
+            clearTimeout(timer);
+            const text = (await resp.text()).slice(0, MAX_BODY);
+            const out = [
+                `status: ${resp.status} ${resp.statusText}`,
+                ...[...resp.headers.entries()].map(([k, v]) => `${k}: ${v}`).slice(0, 30),
+                '',
+                text,
+            ].join('\n');
+            return { content: [{ type: 'text', text: out }] };
+        }
+        catch (e) {
+            return { content: [{ type: 'text', text: `request failed: ${e.message}` }], isError: true };
+        }
+    });
+    // ---- port_check --------------------------------------------------------------
+    server.registerTool('port_check', {
+        description: 'Check if a TCP port is reachable on a host. 5s timeout.',
+        inputSchema: {
+            host: z.string().describe('Hostname or IP'),
+            port: z.number().describe('Port number'),
+            timeout_ms: z.number().optional().default(5000).describe('Timeout in ms'),
+        },
+    }, async ({ host, port, timeout_ms }) => {
+        return await new Promise((resolve) => {
+            const socket = new net.Socket();
+            const done = (ok, extra) => {
+                socket.destroy();
+                resolve({
+                    content: [{
+                            type: 'text',
+                            text: ok
+                                ? `${host}:${port} — open (${extra || 'connected'})`
+                                : `${host}:${port} — closed/unreachable${extra ? ` (${extra})` : ''}`,
+                        }],
+                    isError: !ok,
+                });
+            };
+            socket.setTimeout(timeout_ms);
+            socket.once('connect', () => done(true));
+            socket.once('timeout', () => done(false, 'timeout'));
+            socket.once('error', (e) => done(false, e.message));
+            socket.connect(port, host);
+        });
+    });
+}
+//# sourceMappingURL=http.js.map

package/dist/tools/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/tools/http.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,QAAQ,GAAG,GAAG,GAAG,IAAI,CAAC;AAE5B,MAAM,UAAU,iBAAiB,CAAC,MAAiB;IACjD,+EAA+E;IAC/E,MAAM,CAAC,YAAY,CAAC,cAAc,EAChC;QACE,WAAW,EAAE,4EAA4E;QACzF,WAAW,EAAE;YACX,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;YACrD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC;YACpE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YACpE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;SAChE;KACF,EACD,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE;QACvC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;YAC3D,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC5B,MAAM;gBACN,OAAO;gBACP,IAAI,EAAE,IAAI,IAAI,SAAS;gBACvB,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,QAAQ,EAAE,QAAQ;aACnB,CAAC,CAAC;YACH,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;YACpD,MAAM,GAAG,GAAG;gBACV,WAAW,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE;gBAC3C,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;gBACzE,EAAE;gBACF,IAAI;aACL,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QACpD,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC9F,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,iFAAiF;IACjF,MAAM,CAAC,YAAY,CAAC,YAAY,EAC9B;QACE,WAAW,EAAE,yDAAyD;QACtE,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;YACxC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC;SAC1E;KACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE;QACnC,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YACnC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,CAAC,EAAW,EAAE,KAAc,EAAE,EAAE;gBAC3C,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO,CAAC;oBACN,OAAO,EAAE,CAAC;4BACR,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,EAAE;gCACN,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,YAAY,KAAK,IAAI,WAAW,GAAG;gCACpD,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,wBAAwB,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;yBACxE,CAAC;oBACF,OAAO,EAAE,CAAC,EAAE;iBACb,CAAC,CAAC;YACL,CAAC,CAAC;YACF,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACzC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;YACrD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;YACpD,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/tools/index.d.ts

@@ -0,0 +1,5 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { RamcpConfig } from '../core/config.js';
+import type { PolicyConfig } from '../core/policy.js';
+export declare function registerAllTools(server: McpServer, cfg: RamcpConfig, policy: PolicyConfig, reload: () => void): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/tools/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAStD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,IAAI,GAAG,IAAI,CAQpH"}

package/dist/tools/index.js

@@ -0,0 +1,17 @@
+import { registerFilesystemTools } from './filesystem.js';
+import { registerShellTools } from './shell.js';
+import { registerSystemTools } from './system.js';
+import { registerHttpTools } from './http.js';
+import { registerGitTools } from './git.js';
+import { registerSqliteTools } from './sqlite.js';
+import { registerPolicyTools } from './policy.js';
+export function registerAllTools(server, cfg, policy, reload) {
+    registerSystemTools(server);
+    registerFilesystemTools(server, policy);
+    registerShellTools(server, policy);
+    registerHttpTools(server);
+    registerGitTools(server, policy);
+    registerSqliteTools(server, policy);
+    registerPolicyTools(server, cfg, reload);
+}
+//# sourceMappingURL=index.js.map

package/dist/tools/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,MAAM,UAAU,gBAAgB,CAAC,MAAiB,EAAE,GAAgB,EAAE,MAAoB,EAAE,MAAkB;IAC5G,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5B,uBAAuB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC1B,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,mBAAmB,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;AAC3C,CAAC"}

package/dist/tools/policy.d.ts

@@ -0,0 +1,4 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { RamcpConfig } from '../core/config.js';
+export declare function registerPolicyTools(server: McpServer, cfg: RamcpConfig, reload: () => void): void;
+//# sourceMappingURL=policy.d.ts.map

package/dist/tools/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/tools/policy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGrD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,IAAI,GAAG,IAAI,CA0DjG"}

package/dist/tools/policy.js

@@ -0,0 +1,52 @@
+import { z } from 'zod';
+import { resolveReal } from '../core/policy.js';
+export function registerPolicyTools(server, cfg, reload) {
+    const persist = () => {
+        const { saveConfig } = require('../core/config.js');
+        saveConfig(cfg);
+        reload();
+    };
+    // ---- list_allowed_paths ----------------------------------------------------------
+    server.registerTool('list_allowed_paths', {
+        description: 'Show which paths the AI may access and whether shell is enabled.',
+        inputSchema: {},
+    }, async () => {
+        const out = [
+            `allowed: ${cfg.allowed_paths.length ? cfg.allowed_paths.join(', ') : '(none)'}`,
+            `denied: ${cfg.denied_paths.length ? cfg.denied_paths.join(', ') : '(none)'}`,
+            `shell: ${cfg.shell_enabled ? 'enabled' : 'disabled'}`,
+        ].join('\n');
+        return { content: [{ type: 'text', text: out }] };
+    });
+    // ---- allow_path ----------------------------------------------------------------------
+    server.registerTool('allow_path', {
+        description: 'Grant the AI access to a directory path.',
+        inputSchema: { path: z.string().describe('Absolute path to allow') },
+    }, async ({ path }) => {
+        const real = resolveReal(path);
+        if (!cfg.allowed_paths.includes(real))
+            cfg.allowed_paths.push(real);
+        persist();
+        return { content: [{ type: 'text', text: `Allowed: ${real}` }] };
+    });
+    // ---- deny_path -------------------------------------------------------------------------
+    server.registerTool('deny_path', {
+        description: 'Revoke access to a directory path and/or explicitly deny it.',
+        inputSchema: { path: z.string().describe('Absolute path to deny') },
+    }, async ({ path }) => {
+        const real = resolveReal(path);
+        cfg.allowed_paths = cfg.allowed_paths.filter(p => p !== real);
+        if (!cfg.denied_paths.includes(real))
+            cfg.denied_paths.push(real);
+        persist();
+        return { content: [{ type: 'text', text: `Denied: ${real}` }] };
+    });
+    // ---- shell_enabled ----------------------------------------------------------------------
+    server.registerTool('shell_enabled', {
+        description: 'Check whether shell command execution is currently allowed.',
+        inputSchema: {},
+    }, async () => {
+        return { content: [{ type: 'text', text: cfg.shell_enabled ? 'enabled' : 'disabled' }] };
+    });
+}
+//# sourceMappingURL=policy.js.map

package/dist/tools/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/tools/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,WAAW,EAAgB,MAAM,mBAAmB,CAAC;AAE9D,MAAM,UAAU,mBAAmB,CAAC,MAAiB,EAAE,GAAgB,EAAE,MAAkB;IACzF,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,mBAAmB,CAAuC,CAAC;QAC1F,UAAU,CAAC,GAAG,CAAC,CAAC;QAChB,MAAM,EAAE,CAAC;IACX,CAAC,CAAC;IAEF,qFAAqF;IACrF,MAAM,CAAC,YAAY,CAAC,oBAAoB,EACtC;QACE,WAAW,EAAE,kEAAkE;QAC/E,WAAW,EAAE,EAAE;KAChB,EACD,KAAK,IAAI,EAAE;QACT,MAAM,GAAG,GAAG;YACV,YAAY,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;YAChF,WAAW,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;YAC7E,UAAU,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE;SACvD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEL,yFAAyF;IACzF,MAAM,CAAC,YAAY,CAAC,YAAY,EAC9B;QACE,WAAW,EAAE,0CAA0C;QACvD,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE;KACrE,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;QACjB,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpE,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;IACnE,CAAC,CAAC,CAAC;IAEL,2FAA2F;IAC3F,MAAM,CAAC,YAAY,CAAC,WAAW,EAC7B;QACE,WAAW,EAAE,8DAA8D;QAC3E,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE;KACpE,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;QACjB,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC/B,GAAG,CAAC,aAAa,GAAG,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QAC9D,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClE,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;IAClE,CAAC,CAAC,CAAC;IAEL,4FAA4F;IAC5F,MAAM,CAAC,YAAY,CAAC,eAAe,EACjC;QACE,WAAW,EAAE,6DAA6D;QAC1E,WAAW,EAAE,EAAE;KAChB,EACD,KAAK,IAAI,EAAE;QACT,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;IAC3F,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/tools/shell.d.ts

@@ -0,0 +1,4 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { PolicyConfig } from '../core/policy.js';
+export declare function registerShellTools(server: McpServer, policy: PolicyConfig): void;
+//# sourceMappingURL=shell.d.ts.map

package/dist/tools/shell.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.d.ts","sourceRoot":"","sources":["../../src/tools/shell.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,EAAE,YAAY,EAAgB,MAAM,mBAAmB,CAAC;AAM/D,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,GAAG,IAAI,CAoEhF"}

package/dist/tools/shell.js

@@ -0,0 +1,73 @@
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { z } from 'zod';
+import { shellAllowed } from '../core/policy.js';
+const exec = promisify(execFile);
+const MAX_OUTPUT = 60_000;
+export function registerShellTools(server, policy) {
+    // ---- run_command -------------------------------------------------------
+    server.registerTool('run_command', {
+        description: 'Execute a shell command (via bash -c). Disabled unless shell policy is on. 120s timeout.',
+        inputSchema: {
+            command: z.string().describe('Command line to run'),
+            cwd: z.string().optional().describe('Working directory'),
+            timeout_ms: z.number().optional().default(120_000).describe('Timeout in ms (max 600000)'),
+        },
+    }, async ({ command, cwd, timeout_ms }) => {
+        if (!shellAllowed(policy)) {
+            return { content: [{ type: 'text', text: 'Shell execution is disabled. Enable with `ramcp policy shell on`.' }], isError: true };
+        }
+        const timeout = Math.min(timeout_ms, 600_000);
+        try {
+            const { stdout, stderr } = await exec('bash', ['-c', command], {
+                cwd: cwd || undefined,
+                timeout,
+                maxBuffer: 10 * 1024 * 1024,
+            });
+            let out = '';
+            if (stdout)
+                out += stdout;
+            if (stderr)
+                out += (out ? '\n--- stderr ---\n' : '') + stderr;
+            if (!out)
+                out = '(no output)';
+            return { content: [{ type: 'text', text: out.slice(0, MAX_OUTPUT) }] };
+        }
+        catch (e) {
+            const msg = [
+                e.message || 'command failed',
+                e.stdout ? `\n--- stdout ---\n${e.stdout}` : '',
+                e.stderr ? `\n--- stderr ---\n${e.stderr}` : '',
+            ].filter(Boolean).join('');
+            return { content: [{ type: 'text', text: msg.slice(0, MAX_OUTPUT) }], isError: true };
+        }
+    });
+    // ---- process_list ---------------------------------------------------------
+    server.registerTool('process_list', {
+        description: 'List running processes (pid, ppid, user, cpu%, mem%, command). Sorted by CPU.',
+        inputSchema: {},
+    }, async () => {
+        const { stdout } = await exec('ps', ['axo', 'pid,ppid,user,%cpu,%mem,comm', '--sort=-%cpu']);
+        return { content: [{ type: 'text', text: stdout.slice(0, MAX_OUTPUT) }] };
+    });
+    // ---- kill_process ----------------------------------------------------------
+    server.registerTool('kill_process', {
+        description: 'Send a signal to a process. Default SIGTERM. Disabled unless shell policy is on.',
+        inputSchema: {
+            pid: z.number().describe('Process ID'),
+            signal: z.string().optional().default('SIGTERM').describe('Signal name, e.g. SIGTERM, SIGKILL'),
+        },
+    }, async ({ pid, signal }) => {
+        if (!shellAllowed(policy)) {
+            return { content: [{ type: 'text', text: 'Shell execution is disabled. Enable with `ramcp policy shell on`.' }], isError: true };
+        }
+        try {
+            process.kill(pid, signal);
+            return { content: [{ type: 'text', text: `Sent ${signal} to ${pid}` }] };
+        }
+        catch (e) {
+            return { content: [{ type: 'text', text: e.message }], isError: true };
+        }
+    });
+}
+//# sourceMappingURL=shell.js.map

package/dist/tools/shell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.js","sourceRoot":"","sources":["../../src/tools/shell.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAgB,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAE/D,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAEjC,MAAM,UAAU,GAAG,MAAM,CAAC;AAE1B,MAAM,UAAU,kBAAkB,CAAC,MAAiB,EAAE,MAAoB;IACxE,2EAA2E;IAC3E,MAAM,CAAC,YAAY,CAAC,aAAa,EAC/B;QACE,WAAW,EAAE,0FAA0F;QACvG,WAAW,EAAE;YACX,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;YACnD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YACxD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,4BAA4B,CAAC;SAC1F;KACF,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE;QACrC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mEAAmE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACnI,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE;gBAC7D,GAAG,EAAE,GAAG,IAAI,SAAS;gBACrB,OAAO;gBACP,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;aAC5B,CAAC,CAAC;YACH,IAAI,GAAG,GAAG,EAAE,CAAC;YACb,IAAI,MAAM;gBAAE,GAAG,IAAI,MAAM,CAAC;YAC1B,IAAI,MAAM;gBAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC;YAC9D,IAAI,CAAC,GAAG;gBAAE,GAAG,GAAG,aAAa,CAAC;YAC9B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;QACzE,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,GAAG,GAAG;gBACV,CAAC,CAAC,OAAO,IAAI,gBAAgB;gBAC7B,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE;gBAC/C,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE;aAChD,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC3B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACxF,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,8EAA8E;IAC9E,MAAM,CAAC,YAAY,CAAC,cAAc,EAChC;QACE,WAAW,EAAE,+EAA+E;QAC5F,WAAW,EAAE,EAAE;KAChB,EACD,KAAK,IAAI,EAAE;QACT,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,8BAA8B,EAAE,cAAc,CAAC,CAAC,CAAC;QAC7F,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEL,+EAA+E;IAC/E,MAAM,CAAC,YAAY,CAAC,cAAc,EAChC;QACE,WAAW,EAAE,kFAAkF;QAC/F,WAAW,EAAE;YACX,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;YACtC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,oCAAoC,CAAC;SAChG;KACF,EACD,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE;QACxB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mEAAmE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACnI,CAAC;QACD,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,MAAa,CAAC,CAAC;YACjC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,MAAM,OAAO,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC;QAC3E,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACzE,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/tools/sqlite.d.ts

@@ -0,0 +1,4 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { PolicyConfig } from '../core/policy.js';
+export declare function registerSqliteTools(server: McpServer, policy: PolicyConfig): void;
+//# sourceMappingURL=sqlite.d.ts.map

package/dist/tools/sqlite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite.d.ts","sourceRoot":"","sources":["../../src/tools/sqlite.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,EAAE,YAAY,EAAiB,MAAM,mBAAmB,CAAC;AAEhE,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,GAAG,IAAI,CAwDjF"}

package/dist/tools/sqlite.js

@@ -0,0 +1,57 @@
+import { z } from 'zod';
+import { assertAllowed } from '../core/policy.js';
+export function registerSqliteTools(server, policy) {
+    // ---- sqlite_query ------------------------------------------------------------------
+    server.registerTool('sqlite_query', {
+        description: 'Run SQL on a SQLite database file (better-sqlite3, synchronous). Policy-checked.',
+        inputSchema: {
+            db_path: z.string().describe('Database file path'),
+            sql: z.string().describe('SQL statement(s)'),
+        },
+    }, async ({ db_path, sql }) => {
+        assertAllowed(policy, db_path);
+        try {
+            const { default: Database } = await import('better-sqlite3');
+            const db = new Database(db_path, { readonly: false, fileMustExist: true });
+            try {
+                const trimmed = sql.trim().toLowerCase();
+                const isSelect = trimmed.startsWith('select') || trimmed.startsWith('with') || trimmed.startsWith('pragma');
+                if (isSelect) {
+                    const rows = db.prepare(sql).all();
+                    return { content: [{ type: 'text', text: JSON.stringify(rows, null, 2).slice(0, 60_000) || '[]' }] };
+                }
+                const info = db.exec(sql);
+                return { content: [{ type: 'text', text: `OK — changes: ${info.changes}` }] };
+            }
+            finally {
+                db.close();
+            }
+        }
+        catch (e) {
+            return { content: [{ type: 'text', text: `sqlite error: ${e.message}` }], isError: true };
+        }
+    });
+    // ---- sqlite_schema -------------------------------------------------------------------
+    server.registerTool('sqlite_schema', {
+        description: 'List tables and their CREATE statements for a SQLite database. Policy-checked.',
+        inputSchema: { db_path: z.string().describe('Database file path') },
+    }, async ({ db_path }) => {
+        assertAllowed(policy, db_path);
+        try {
+            const { default: Database } = await import('better-sqlite3');
+            const db = new Database(db_path, { readonly: true, fileMustExist: true });
+            try {
+                const rows = db.prepare("SELECT name, sql FROM sqlite_master WHERE type='table' AND name NOT LIKE 'sqlite_%'").all();
+                const out = rows.map(r => r.sql || `-- ${r.name}`).join('\n\n');
+                return { content: [{ type: 'text', text: out || '(no tables)' }] };
+            }
+            finally {
+                db.close();
+            }
+        }
+        catch (e) {
+            return { content: [{ type: 'text', text: `sqlite error: ${e.message}` }], isError: true };
+        }
+    });
+}
+//# sourceMappingURL=sqlite.js.map

package/dist/tools/sqlite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite.js","sourceRoot":"","sources":["../../src/tools/sqlite.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAgB,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEhE,MAAM,UAAU,mBAAmB,CAAC,MAAiB,EAAE,MAAoB;IACzE,uFAAuF;IACvF,MAAM,CAAC,YAAY,CAAC,cAAc,EAChC;QACE,WAAW,EAAE,kFAAkF;QAC/F,WAAW,EAAE;YACX,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;YAClD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;SAC7C;KACF,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE;QACzB,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;YAC7D,MAAM,EAAE,GAAG,IAAK,QAAgB,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YACpF,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAC5G,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;oBACnC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;gBACvG,CAAC;gBACD,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC1B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;YAChF,CAAC;oBAAS,CAAC;gBACT,EAAE,CAAC,KAAK,EAAE,CAAC;YACb,CAAC;QACH,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC5F,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,yFAAyF;IACzF,MAAM,CAAC,YAAY,CAAC,eAAe,EACjC;QACE,WAAW,EAAE,gFAAgF;QAC7F,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE;KACpE,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QACpB,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;YAC7D,MAAM,EAAE,GAAG,IAAK,QAAgB,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YACnF,IAAI,CAAC;gBACH,MAAM,IAAI,GAAyC,EAAE,CAAC,OAAO,CAC3D,qFAAqF,CACtF,CAAC,GAAG,EAAE,CAAC;gBACR,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAChE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,aAAa,EAAE,CAAC,EAAE,CAAC;YACrE,CAAC;oBAAS,CAAC;gBACT,EAAE,CAAC,KAAK,EAAE,CAAC;YACb,CAAC;QACH,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC5F,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/tools/system.d.ts

@@ -0,0 +1,3 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export declare function registerSystemTools(server: McpServer): void;
+//# sourceMappingURL=system.d.ts.map

package/dist/tools/system.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system.d.ts","sourceRoot":"","sources":["../../src/tools/system.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAIzE,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAuD3D"}

package/dist/tools/system.js

@@ -0,0 +1,56 @@
+import os from 'node:os';
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { z } from 'zod';
+const exec = promisify(execFile);
+export function registerSystemTools(server) {
+    // ---- system_info ---------------------------------------------------------
+    server.registerTool('system_info', {
+        description: 'Host, platform, CPU, memory, uptime, and Node.js version of the server.',
+        inputSchema: {},
+    }, async () => {
+        const cpus = os.cpus();
+        const out = [
+            `hostname: ${os.hostname()}`,
+            `platform: ${os.platform()} ${os.release()} (${os.arch()})`,
+            `cpu: ${cpus.length}x ${cpus[0]?.model || 'unknown'}`,
+            `memory_total: ${Math.round(os.totalmem() / 1024 / 1024)} MB`,
+            `memory_free: ${Math.round(os.freemem() / 1024 / 1024)} MB`,
+            `uptime_seconds: ${Math.round(os.uptime())}`,
+            `loadavg: ${os.loadavg().map(n => n.toFixed(2)).join(' ')}`,
+            `node: ${process.version}`,
+        ].join('\n');
+        return { content: [{ type: 'text', text: out }] };
+    });
+    // ---- disk_usage ------------------------------------------------------------
+    server.registerTool('disk_usage', {
+        description: 'Filesystem sizes and usage. Human-readable df output plus inodes.',
+        inputSchema: { path: z.string().optional().describe('Restrict to a mount point') },
+    }, async ({ path }) => {
+        const args = ['-h'];
+        if (path)
+            args.push(path);
+        try {
+            const { stdout } = await exec('df', args);
+            return { content: [{ type: 'text', text: stdout }] };
+        }
+        catch (e) {
+            return { content: [{ type: 'text', text: e.message }], isError: true };
+        }
+    });
+    // ---- network_interfaces -----------------------------------------------------
+    server.registerTool('network_interfaces', {
+        description: 'List network interfaces with addresses. Loopback included.',
+        inputSchema: {},
+    }, async () => {
+        const ifaces = os.networkInterfaces();
+        const lines = [];
+        for (const [name, addrs] of Object.entries(ifaces)) {
+            for (const a of addrs || []) {
+                lines.push(`${name}\t${a.family}\t${a.address}${a.mac ? `\tmac ${a.mac}` : ''}`);
+            }
+        }
+        return { content: [{ type: 'text', text: lines.join('\n') || 'none' }] };
+    });
+}
+//# sourceMappingURL=system.js.map

package/dist/tools/system.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system.js","sourceRoot":"","sources":["../../src/tools/system.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAEjC,MAAM,UAAU,mBAAmB,CAAC,MAAiB;IACnD,6EAA6E;IAC7E,MAAM,CAAC,YAAY,CAAC,aAAa,EAC/B;QACE,WAAW,EAAE,yEAAyE;QACtF,WAAW,EAAE,EAAE;KAChB,EACD,KAAK,IAAI,EAAE;QACT,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG;YACV,aAAa,EAAE,CAAC,QAAQ,EAAE,EAAE;YAC5B,aAAa,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG;YAC3D,QAAQ,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,SAAS,EAAE;YACrD,iBAAiB,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,KAAK;YAC7D,gBAAgB,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,KAAK;YAC3D,mBAAmB,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE;YAC5C,YAAY,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;YAC3D,SAAS,OAAO,CAAC,OAAO,EAAE;SAC3B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEL,+EAA+E;IAC/E,MAAM,CAAC,YAAY,CAAC,YAAY,EAC9B;QACE,WAAW,EAAE,mEAAmE;QAChF,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC,EAAE;KACnF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;QACjB,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,IAAI,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC1C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACvD,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACzE,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,gFAAgF;IAChF,MAAM,CAAC,YAAY,CAAC,oBAAoB,EACtC;QACE,WAAW,EAAE,4DAA4D;QACzE,WAAW,EAAE,EAAE;KAChB,EACD,KAAK,IAAI,EAAE;QACT,MAAM,MAAM,GAAG,EAAE,CAAC,iBAAiB,EAAE,CAAC;QACtC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,KAAK,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;gBAC5B,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC,EAAE,CAAC;IAC3E,CAAC,CAAC,CAAC;AACP,CAAC"}

package/install.sh

@@ -0,0 +1,79 @@
+#!/usr/bin/env bash
+#
+# remote-access-mcp — one-liner installer for Ubuntu/Debian servers.
+#
+#   curl -fsSL https://raw.githubusercontent.com/amiralimanzar/remote-access-mcp/main/install.sh | bash
+#
+# What it does:
+#   1. Checks for Node.js >= 18. Installs it via NodeSource if missing.
+#   2. Installs remote-access-mcp globally via npm.
+#   3. Prints next steps. Does NOT start anything — the user stays in control.
+#
+set -euo pipefail
+
+BOLD='\033[1m'
+GREEN='\033[0;32m'
+YELLOW='\033[0;33m'
+RED='\033[0;31m'
+NC='\033[0m'
+
+say()  { printf "${GREEN}✔${NC} %s\n" "$1"; }
+warn() { printf "${YELLOW}⚠${NC} %s\n" "$1"; }
+die()  { printf "${RED}✖ %s${NC}\n" "$1" >&2; exit 1; }
+
+header() {
+  printf "${BOLD}"
+  cat <<'EOF'
+  ___                        _____
+ | _ \__ _ __ _ ___ _ _   |_   _|__ _ _ _ __ _ ___
+ |   / _` / _` / -_) '_|    | |/ - \ '_| '_/ _` / -_)
+ |_|_\__,_\__, \___|_|      |_|\___/_| |_| \__,_\___|
+          |___/         remote-access-mcp installer
+EOF
+  printf "${NC}\n"
+}
+
+header
+
+# ----------------------------------------------------------------Node.js
+need_node_install=0
+
+if ! command -v node >/dev/null 2>&1; then
+  need_node_install=1
+  warn "Node.js not found."
+else
+  NODE_MAJOR="$(node -p 'process.versions.node.split(".")[0]')"
+  if [ "${NODE_MAJOR}" -lt 18 ]; then
+    need_node_install=1
+    warn "Node.js $(node --version) found, but >= 18 is required."
+  else
+    say "Node.js $(node --version) — OK"
+  fi
+fi
+
+if [ "${need_node_install}" -eq 1 ]; then
+  if [ "$(id -u)" -ne 0 ]; then
+    die "Node.js install requires root. Re-run with sudo, or install Node >= 18 manually first."
+  fi
+  if ! command -v curl >/dev/null 2>&1; then
+    apt-get update -qq && apt-get install -y -qq curl
+  fi
+  say "Installing Node.js 22.x LTS via NodeSource..."
+  curl -fsSL https://deb.nodesource.com/setup_22.x | bash - >/dev/null
+  apt-get install -y -qq nodejs >/dev/null
+  say "Node.js $(node --version) installed"
+fi
+
+# ----------------------------------------------------------------npm package
+say "Installing remote-access-mcp globally..."
+npm install -g remote-access-mcp --silent
+
+say "Installed: $(remote-access-mcp --version 2>/dev/null || ramcp --version 2>/dev/null || echo 'OK')"
+
+printf '\n'
+printf "${BOLD}Next steps:${NC}\n"
+printf '  1. ramcp init               # generate config + token\n'
+printf '  2. ramcp start              # run in foreground\n'
+printf '  3. ramcp service install    # systemd + nginx vhost (production)\n'
+printf '  4. ramcp url                # connector URL for your chatbot\n'
+printf '\nDocs: https://github.com/amiralimanzar/remote-access-mcp\n'

package/package.json

@@ -0,0 +1,63 @@
+{
+  "name": "remote-access-mcp",
+  "version": "1.0.0",
+  "description": "Turn any Linux server into an AI-agent-accessible machine via MCP. ChatGPT, Claude, and Grok connect over HTTPS and control files, shell, git, and more — securely and with zero Python dependencies.",
+  "type": "module",
+  "bin": {
+    "remote-access-mcp": "dist/cli.js",
+    "ramcp": "dist/cli.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE",
+    "install.sh"
+  ],
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsx watch src/main.ts",
+    "start": "node dist/main.js",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "lint": "tsc --noEmit",
+    "prepublishOnly": "npm run build && npm test"
+  },
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "ai",
+    "agent",
+    "remote-access",
+    "server-management",
+    "chatgpt",
+    "claude",
+    "devops"
+  ],
+  "author": "Ali Manzar <amiralimanzar@gmail.com> (https://amiralimanzar.ir)",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/amiralimanzar/remote-access-mcp.git"
+  },
+  "bugs": {
+    "url": "https://github.com/amiralimanzar/remote-access-mcp/issues"
+  },
+  "homepage": "https://github.com/amiralimanzar/remote-access-mcp#readme",
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.20.0",
+    "express": "^4.21.0",
+    "better-sqlite3": "^11.6.0",
+    "zod": "^3.24.0"
+  },
+  "devDependencies": {
+    "@types/better-sqlite3": "^7.6.12",
+    "@types/express": "^4.17.21",
+    "@types/node": "^22.10.0",
+    "tsx": "^4.19.0",
+    "typescript": "^5.7.0",
+    "vitest": "^2.1.0"
+  }
+}