remote-access-mcp 3.0.0 → 3.0.2

package/docs/ai/transport-compatibility.md

@@ -0,0 +1,85 @@
+# Transport Compatibility
+
+Why the server speaks three MCP dialects, and the exact bugs that forced
+each one. This file exists so nobody "simplifies" it away.
+
+## The three dialects
+
+| # | Dialect | Who speaks it | Handshake | Replies |
+|---|---|---|---|---|
+| 1 | Streamable HTTP, **stateless** | ChatGPT, Grok | POST initialize | inside the POST response; session id ignored |
+| 2 | Streamable HTTP, **stateful** | Claude (new SDK), most reference clients | POST initialize → `Mcp-Session-Id` response header | every request carries the id; GET opens a server→client notification stream |
+| 3 | **Legacy SSE** (2024-11-05) | Claude's connector UI auto-selects it when the URL ends in `/sse` | **GET** → `event: endpoint` frame announces the POST URL + sessionId | replies ride the long-lived GET stream; POSTs are 202 |
+
+All three are served on **both** endpoint paths (`/mcp` and `/sse`, plus any
+configured aliases) — the URL does not determine the dialect; the request
+shape does.
+
+## Dispatch rules (server/app.ts)
+
+```
+POST with Mcp-Session-Id:
+    known session    → that session's StreamableHTTP transport
+    unknown session  → 404 "Session not found"   (client re-initializes)
+POST initialize (no id) → new stateful session, id in response header
+POST anything else (no id) → stateless throwaway transport  (ChatGPT/Grok)
+GET  with Mcp-Session-Id   → streamable notification stream for that session
+GET  without id            → legacy SSE handshake (event: endpoint …)
+POST /<token>/<path>/messages?sessionId=… → legacy SSE post-back leg
+DELETE with id             → session teardown (204)
+```
+
+`normalizeAccept()` widens every Accept header to
+`application/json, text/event-stream` (GET → `text/event-stream`) before
+the SDK sees it. The SDK enforces the spec strictly and answers 406 to
+`*/*` or single-type Accepts; real clients send all of those.
+
+Responses are **SSE-framed** (`enableJsonResponse: false`) — the spec's
+reference behavior, and the framing every dialect we've seen accepts.
+Plain-JSON mode was tried; Claude's connector silently dropped it.
+
+## The incident log (each of these shipped and hurt)
+
+1. **No session id** → Claude retried initialize every ~60s and reported
+   "Couldn't reach <server>". Fix: stateful sessions (v2.2.0),
+   `sessions.ts` store with 30-min idle TTL, 200 cap, per-token binding.
+2. **406 on honest Accepts** → clients sending `*/*` or
+   `text/event-stream` alone got rejected by the SDK's strict check.
+   Fix: normalizeAccept (v2.2.1).
+3. **`Unknown SSE event: endpoint`** → the legacy transport was bolted on
+   by hijacking **every** GET; a stateful client opening its notification
+   stream received the legacy `event: endpoint` frame and aborted its whole
+   TaskGroup. Fix: dispatch GETs by the Mcp-Session-Id header (v2.2.2/3).
+4. **Plain-JSON responses dropped** → initialize answered 200 +
+   `application/json`, Claude read it and silently gave up. Fix: SSE
+   framing everywhere (v2.2.4). Diagnosed with a byte-logging wire proxy:
+   the client's exact headers/body made it obvious Claude got a *valid*
+   reply and still walked away — only the framing differed.
+
+## Verification (do not trust, run)
+
+The byte-exact Claude simulation lives in git history
+(`python-httpx/0.28.1` + `clientInfo.name: "Anthropic"`); the pinned suite
+covers the matrix:
+
+- `tests/sessions.test.ts` — stateful handshake, routing, hijack-refusal,
+  DELETE teardown, stateless fallback
+- `tests/get-dispatch.test.ts` — GET with id never emits `endpoint`; GET
+  without id always does
+- `tests/legacy-sse.test.ts` — full 2024-11-05 handshake over `/sse` and
+  `/mcp`, sessionId-less POST-back → 400, unknown → 404, cross-token → 403
+- `tests/accept-compat.test.ts` — six Accept variants all initialize
+
+## Edge / proxy notes (production config)
+
+- nginx: `proxy_buffering off`, `proxy_request_buffering off`,
+  `proxy_set_header Connection ""`, `chunked_transfer_encoding on`,
+  `gzip off`, `add_header X-Accel-Buffering no`, read/send timeouts 3600s —
+  a legacy SSE stream idles between tool calls; the default 60s proxy
+  timeouts kill it. The gateway sends `: keepalive` comments every 15s so
+  intermediate hops don't reap the stream.
+- Cloudflare proxies all three dialects fine (verified from the edge).
+- Quick tunnels on filtered networks can register but not carry traffic —
+  `ramcp tunnel` self-verifies and warns instead of handing out a dead URL
+  (that's environment, not protocol; http2-over-TCP is forced for the same
+  reason — QUIC is blocked on some ISPs).

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "remote-access-mcp",
-  "version": "3.0.0",
-  "description": "Turn any Linux server into an AI-agent-accessible machine via MCP. ChatGPT, Claude, and Grok connect over HTTPS and control files, shell, git, and more — securely and with zero Python dependencies.",
+  "version": "3.0.2",
+  "description": "Turn any machine into a secure AI-agent-accessible endpoint via MCP. Connect ChatGPT, Claude, Grok, and other MCP clients to files, shell, git, services, and more.",
   "type": "module",
   "bin": {
     "remote-access-mcp": "dist/cli.js",
@@ -12,10 +12,15 @@
     "README.md",
     "README.fa.md",
     "LICENSE",
-    "install.sh"
+    "install.sh",
+    "AGENTS.md",
+    "SECURITY.md",
+    "CHANGELOG.md",
+    "CONTRIBUTING.md",
+    "docs/ai"
   ],
   "engines": {
-    "node": ">=20.18.1"
+    "node": ">=18"
   },
   "scripts": {
     "build": "tsc",
@@ -28,14 +33,18 @@
   },
   "keywords": [
     "mcp",
+    "mcp-server",
+    "mcp-gateway",
     "model-context-protocol",
-    "ai",
-    "agent",
+    "ai-agent",
+    "ai-ops",
     "remote-access",
     "server-management",
+    "infrastructure",
+    "devops",
+    "linux",
     "chatgpt",
-    "claude",
-    "devops"
+    "claude"
   ],
   "author": "Amir Ali Manzar (https://amiralimanzar.ir)",
   "license": "MIT",
@@ -49,13 +58,13 @@
   "homepage": "https://github.com/AmirAliManzar/remote-access-mcp#readme",
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.20.0",
-    "@upstash/context7-mcp": "^4.0.4",
     "better-sqlite3": "^11.6.0",
-    "codebase-memory-mcp": "^0.10.8",
     "express": "^4.21.0",
     "zod": "^3.24.0"
   },
   "optionalDependencies": {
+    "@upstash/context7-mcp": "^4.0.4",
+    "codebase-memory-mcp": "^0.10.8",
     "context-mode": "^1.0.169"
   },
   "devDependencies": {

package/dist/cli.d.ts

@@ -1,3 +0,0 @@
-#!/usr/bin/env node
-export {};
-//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -1,7 +0,0 @@
-#!/usr/bin/env node
-import { main } from './cli/main.js';
-main(process.argv.slice(2)).catch((e) => {
-    console.error(e);
-    process.exit(1);
-});
-//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAErC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;IACtC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/core/fleet.d.ts

@@ -1,71 +0,0 @@
-/**
- * Fleet: run tools on remote machines over SSH.
- *
- * Design decisions, deliberately narrow:
- *
- *  - Outbound SSH only. The gateway machine holds one private key; remote
- *    machines need nothing installed except an SSH server and a POSIX shell.
- *    No agent daemons, no listening ports, no new attack surface inbound.
- *
- *  - Per-host allowlists of tools. `ramcp fleet add --tools shell,fs` is the
- *    whole security model: a host that was never granted a tool group
- *    refuses it with a clear error. Local-only tools (schedule, policy
- *    management, ops) ignore `host` entirely.
- *
- *  - File transfer for fs tools is piped over stdin via base64, so writes
- *    don't touch the remote disk with temp files (which would race, leak
- *    into other users' listings, or fail on full filesystems).
- *
- *  - SSH_BIN env override exists for tests (fake ssh) and for Windows hosts
- *    that want a specific OpenSSH path.
- */
-export interface FleetHost {
-    name: string;
-    host: string;
-    port?: number;
-    tools: string[];
-    note?: string;
-    added: string;
-}
-/** Tool group → fleet capability check. Local-only groups have no remote path. */
-export declare const FLEET_CAPABILITIES: readonly ["shell", "fs", "services", "packages", "logs"];
-export declare function isFleetCapability(g: string): boolean;
-export declare function sshBin(): string;
-export interface SshOpts {
-    timeoutMs?: number;
-    stdin?: string;
-}
-/** Run one command over SSH. Throws on non-zero exit with combined output. */
-export declare function sshRun(host: string, port: number | undefined, command: string, opts?: SshOpts): Promise<{
-    stdout: string;
-    stderr: string;
-}>;
-/** Exit status of a probe command; 0 = reachable. */
-export declare function fleetProbe(host: FleetHost): Promise<{
-    ok: boolean;
-    detail: string;
-}>;
-/** shell group */
-export declare function buildRunCommand(command: string, cwd?: string, timeoutMs?: number): string;
-/** fs group */
-export declare function buildReadCommand(path: string): string;
-export declare function buildWriteCommand(path: string, content: string, mkdir: boolean): string;
-export declare function buildDeleteCommand(path: string): string;
-export declare function buildListCommand(path: string): string;
-export declare function buildFileInfoCommand(path: string): string;
-export declare function buildTailCommand(path: string, lines: number): string;
-export declare function buildSearchCommand(path: string, pattern: string, maxResults: number): string;
-/** services group */
-export declare function buildServiceStatusCommand(unit: string): string;
-export declare function buildServiceActionCommand(unit: string, action: string): string;
-/** packages group */
-export declare function buildPackageListCommand(filter?: string): string;
-/** logs group */
-export declare function buildJournalCommand(unit: string, lines: number): string;
-export declare class FleetError extends Error {
-    constructor(msg: string);
-}
-export declare function findHost(hosts: FleetHost[], name: string): FleetHost;
-/** Throws unless the host was granted the tool group at `ramcp fleet add` time. */
-export declare function assertCapability(hosts: FleetHost[], name: string, group: string): FleetHost;
-//# sourceMappingURL=fleet.d.ts.map

package/dist/core/fleet.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"fleet.d.ts","sourceRoot":"","sources":["../../src/core/fleet.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,kFAAkF;AAClF,eAAO,MAAM,kBAAkB,0DAA2D,CAAC;AAE3F,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED,wBAAgB,MAAM,IAAI,MAAM,CAE/B;AAED,MAAM,WAAW,OAAO;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,8EAA8E;AAC9E,wBAAsB,MAAM,CAC1B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,OAAY,GACjB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA0C7C;AAED,qDAAqD;AACrD,wBAAsB,UAAU,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAO1F;AAYD,kBAAkB;AAClB,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,SAAS,SAAU,GAAG,MAAM,CAM1F;AAED,eAAe;AACf,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAErD;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,CAIvF;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGrD;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAI5F;AAED,qBAAqB;AACrB,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAE9E;AAED,qBAAqB;AACrB,wBAAgB,uBAAuB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAI/D;AAED,iBAAiB;AACjB,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAEvE;AAMD,qBAAa,UAAW,SAAQ,KAAK;gBACvB,GAAG,EAAE,MAAM;CACxB;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,CAIpE;AAED,mFAAmF;AACnF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,CAM3F"}

package/dist/core/fleet.js

@@ -1,148 +0,0 @@
-import { execFile, spawn } from 'node:child_process';
-import { promisify } from 'node:util';
-const exec = promisify(execFile);
-/** Tool group → fleet capability check. Local-only groups have no remote path. */
-export const FLEET_CAPABILITIES = ['shell', 'fs', 'services', 'packages', 'logs'];
-export function isFleetCapability(g) {
-    return FLEET_CAPABILITIES.includes(g);
-}
-export function sshBin() {
-    return process.env.SSH_BIN || 'ssh';
-}
-/** Run one command over SSH. Throws on non-zero exit with combined output. */
-export async function sshRun(host, port, command, opts = {}) {
-    const args = [
-        // -T: no pty (we want clean pipes), BatchMode: never prompt — a hung
-        // password prompt inside an AI tool call is a deadlock.
-        '-o', 'BatchMode=yes',
-        '-o', 'StrictHostKeyChecking=accept-new',
-        '-o', 'ConnectTimeout=10',
-        '-o', 'ServerAliveInterval=15',
-    ];
-    if (port)
-        args.push('-p', String(port));
-    args.push(host, '--', command);
-    // NOTE: promisify(execFile) does not forward the `input` option (a known
-    // footgun — the child's stdin never closes and the call hangs to timeout).
-    // stdin piping is therefore done by hand: write, then end.
-    if (opts.stdin !== undefined) {
-        return await new Promise((resolve, reject) => {
-            const child = spawn(sshBin(), args, { stdio: ['pipe', 'pipe', 'pipe'] });
-            let stdout = '';
-            let stderr = '';
-            const timer = setTimeout(() => {
-                child.kill();
-                reject(new Error(`ssh timed out after ${Math.round((opts.timeoutMs ?? 120_000) / 1000)}s`));
-            }, opts.timeoutMs ?? 120_000);
-            child.stdout.on('data', c => { stdout += c; });
-            child.stderr.on('data', c => { stderr += c; });
-            child.on('error', e => { clearTimeout(timer); reject(e); });
-            child.on('close', code => {
-                clearTimeout(timer);
-                if (code === 0)
-                    resolve({ stdout, stderr });
-                else
-                    reject(Object.assign(new Error(`ssh exited with ${code}`), { stdout, stderr }));
-            });
-            child.stdin.write(opts.stdin);
-            child.stdin.end();
-        });
-    }
-    const { stdout, stderr } = await exec(sshBin(), args, {
-        timeout: opts.timeoutMs ?? 120_000,
-        maxBuffer: 10 * 1024 * 1024,
-    });
-    return { stdout, stderr };
-}
-/** Exit status of a probe command; 0 = reachable. */
-export async function fleetProbe(host) {
-    try {
-        const { stdout } = await sshRun(host.host, host.port, 'echo ramcp-ok', { timeoutMs: 15_000 });
-        return { ok: stdout.includes('ramcp-ok'), detail: stdout.trim() };
-    }
-    catch (e) {
-        return { ok: false, detail: (e.stderr || e.stdout || e.message || '').split('\n')[0].slice(0, 120) };
-    }
-}
-// ---------------------------------------------------------------------------
-// Command builders — single source of truth for what runs remotely.
-// All of these are invoked via `ssh … -- command`, so each one gets ONE
-// shell string. Keep them quoting-tight: paths arrive validated from the
-// tool schema (zod), but we still quote everything with double quotes.
-// ---------------------------------------------------------------------------
-const q = (s) => `"${s.replace(/(["\\$`])/g, '\\$1')}"`;
-const b64 = (s) => Buffer.from(s, 'utf8').toString('base64');
-/** shell group */
-export function buildRunCommand(command, cwd, timeoutMs = 120_000) {
-    const secs = Math.min(Math.round(timeoutMs / 1000), 600);
-    const inner = cwd
-        ? `cd ${q(cwd)} 2>/dev/null && ${command}`
-        : command;
-    return `timeout ${secs} sh -c ${q(inner)} 2>&1`;
-}
-/** fs group */
-export function buildReadCommand(path) {
-    return `[ -f ${q(path)} ] && base64 ${q(path)}`;
-}
-export function buildWriteCommand(path, content, mkdir) {
-    const pre = mkdir ? `mkdir -p ${q(path.replace(/\/[^/]*$/, ''))} && ` : '';
-    // stdin carries the base64; the command decodes it. No temp files.
-    return `${pre}base64 -d > ${q(path)}`;
-}
-export function buildDeleteCommand(path) {
-    return `rm -rf ${q(path)}`;
-}
-export function buildListCommand(path) {
-    // trailing / on dirs; -F suffixes symlinks with @
-    return `ls -1F ${q(path)} 2>&1 | head -2000`;
-}
-export function buildFileInfoCommand(path) {
-    return `stat ${q(path)} 2>&1`;
-}
-export function buildTailCommand(path, lines) {
-    return `tail -n ${Math.max(1, Math.min(lines, 1000))} ${q(path)} 2>&1`;
-}
-export function buildSearchCommand(path, pattern, maxResults) {
-    // pattern is ERE; validated as a string by zod, quoted single to avoid interpolation
-    const p = pattern.replace(/'/g, `'\\''`);
-    return `grep -rEn ${q(p)} ${q(path)} 2>/dev/null | head -${Math.min(maxResults, 200)} || echo "(no matches)"`;
-}
-/** services group */
-export function buildServiceStatusCommand(unit) {
-    return `systemctl is-active ${q(unit)}; systemctl is-enabled ${q(unit)} 2>&1`;
-}
-export function buildServiceActionCommand(unit, action) {
-    return `systemctl ${q(action)} ${q(unit)} 2>&1`;
-}
-/** packages group */
-export function buildPackageListCommand(filter) {
-    const base = `dpkg-query -W -f '\"\${Package}\\t\${Version}\\n\"' 2>/dev/null`;
-    if (!filter)
-        return base;
-    return `${base} | grep -i ${q(filter)} || true`;
-}
-/** logs group */
-export function buildJournalCommand(unit, lines) {
-    return `journalctl -u ${q(unit)} -n ${Math.min(lines, 500)} --no-pager -o short-iso 2>&1 | tail -${Math.min(lines, 500)}`;
-}
-// ---------------------------------------------------------------------------
-// Host lookup + capability gate
-// ---------------------------------------------------------------------------
-export class FleetError extends Error {
-    constructor(msg) { super(msg); this.name = 'FleetError'; }
-}
-export function findHost(hosts, name) {
-    const h = hosts.find(h => h.name === name);
-    if (!h)
-        throw new FleetError(`Unknown fleet host "${name}". Known: ${hosts.map(h => h.name).join(', ') || '(none)'}`);
-    return h;
-}
-/** Throws unless the host was granted the tool group at `ramcp fleet add` time. */
-export function assertCapability(hosts, name, group) {
-    const h = findHost(hosts, name);
-    if (!h.tools.includes(group)) {
-        throw new FleetError(`Host "${name}" does not allow the ${group} tool group (allowed: ${h.tools.join(', ') || 'none'}). Grant it with: ramcp fleet edit ${name} --tools ${group}`);
-    }
-    return h;
-}
-//# sourceMappingURL=fleet.js.map

package/dist/core/fleet.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"fleet.js","sourceRoot":"","sources":["../../src/core/fleet.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAiCjC,kFAAkF;AAClF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,CAAU,CAAC;AAE3F,MAAM,UAAU,iBAAiB,CAAC,CAAS;IACzC,OAAQ,kBAAwC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,MAAM;IACpB,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC;AACtC,CAAC;AAOD,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,IAAY,EACZ,IAAwB,EACxB,OAAe,EACf,OAAgB,EAAE;IAElB,MAAM,IAAI,GAAG;QACX,qEAAqE;QACrE,wDAAwD;QACxD,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE,kCAAkC;QACxC,IAAI,EAAE,mBAAmB;QACzB,IAAI,EAAE,wBAAwB;KAC/B,CAAC;IACF,IAAI,IAAI;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAE/B,yEAAyE;IACzE,2EAA2E;IAC3E,2DAA2D;IAC3D,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;YACzE,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,KAAK,CAAC,IAAI,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,KAAK,CAAC,uBAAuB,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9F,CAAC,EAAE,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC;YAC9B,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/C,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/C,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE;gBACvB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,IAAI,KAAK,CAAC;oBAAE,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;;oBACvC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;YACvF,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAM,CAAC,CAAC;YAC/B,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACpB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE;QACpD,OAAO,EAAE,IAAI,CAAC,SAAS,IAAI,OAAO;QAClC,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;KAC5B,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC;AAED,qDAAqD;AACrD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAe;IAC9C,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9F,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;IACpE,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IACvG,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,oEAAoE;AACpE,wEAAwE;AACxE,yEAAyE;AACzE,uEAAuE;AACvE,8EAA8E;AAE9E,MAAM,CAAC,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC;AAChE,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAErE,kBAAkB;AAClB,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,GAAY,EAAE,SAAS,GAAG,OAAO;IAChF,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,GAAG;QACf,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,mBAAmB,OAAO,EAAE;QAC1C,CAAC,CAAC,OAAO,CAAC;IACZ,OAAO,WAAW,IAAI,UAAU,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;AAClD,CAAC;AAED,eAAe;AACf,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,QAAQ,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,OAAe,EAAE,KAAc;IAC7E,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,mEAAmE;IACnE,OAAO,GAAG,GAAG,eAAe,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,UAAU,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,kDAAkD;IAClD,OAAO,UAAU,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,OAAO,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAa;IAC1D,OAAO,WAAW,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,OAAe,EAAE,UAAkB;IAClF,qFAAqF;IACrF,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzC,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,wBAAwB,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,yBAAyB,CAAC;AAChH,CAAC;AAED,qBAAqB;AACrB,MAAM,UAAU,yBAAyB,CAAC,IAAY;IACpD,OAAO,uBAAuB,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,IAAY,EAAE,MAAc;IACpE,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;AAClD,CAAC;AAED,qBAAqB;AACrB,MAAM,UAAU,uBAAuB,CAAC,MAAe;IACrD,MAAM,IAAI,GAAG,iEAAiE,CAAC;IAC/E,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,GAAG,IAAI,cAAc,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;AAClD,CAAC;AAED,iBAAiB;AACjB,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,KAAa;IAC7D,OAAO,iBAAiB,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,yCAAyC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;AAC5H,CAAC;AAED,8EAA8E;AAC9E,gCAAgC;AAChC,8EAA8E;AAE9E,MAAM,OAAO,UAAW,SAAQ,KAAK;IACnC,YAAY,GAAW,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC;CACnE;AAED,MAAM,UAAU,QAAQ,CAAC,KAAkB,EAAE,IAAY;IACvD,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,uBAAuB,IAAI,aAAa,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC;IACtH,OAAO,CAAC,CAAC;AACX,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,gBAAgB,CAAC,KAAkB,EAAE,IAAY,EAAE,KAAa;IAC9E,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,UAAU,CAAC,SAAS,IAAI,wBAAwB,KAAK,yBAAyB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,sCAAsC,IAAI,YAAY,KAAK,EAAE,CAAC,CAAC;IACrL,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/tools/fleet.d.ts

@@ -1,4 +0,0 @@
-import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-import type { ToolContext } from '../core/context.js';
-export declare function registerFleetTools(server: McpServer, ctx: ToolContext): void;
-//# sourceMappingURL=fleet.d.ts.map

package/dist/tools/fleet.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"fleet.d.ts","sourceRoot":"","sources":["../../src/tools/fleet.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAetD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,GAAG,IAAI,CA+B5E"}

package/dist/tools/fleet.js

@@ -1,39 +0,0 @@
-import { fleetProbe } from '../core/fleet.js';
-/**
- * Fleet meta-tools: listing and probing the machines this gateway can drive.
- * The actual remote operations (run_command, read_file, …) live in their own
- * suites — each gained an optional `host` parameter that routes over SSH
- * when provided. This split keeps one tool per verb (the AI does not have
- * to learn "remote_run_command") while the per-host allowlist gates access.
- */
-function hostList(ctx) {
-    return ctx.cfg.fleet?.hosts || [];
-}
-export function registerFleetTools(server, ctx) {
-    // ---- fleet_list ---------------------------------------------------------
-    server.registerTool('fleet_list', {
-        description: 'List fleet machines this gateway can reach over SSH, with their granted tool groups.',
-        inputSchema: {},
-    }, async () => {
-        const hosts = hostList(ctx);
-        if (!hosts.length)
-            return { content: [{ type: 'text', text: '(no fleet hosts — add with `ramcp fleet add`)' }] };
-        const out = hosts.map(h => `${h.name.padEnd(14)} ${h.host}${h.port ? ':' + h.port : ''}  tools: ${h.tools.join(',') || '(none)'}${h.note ? '  — ' + h.note : ''}`);
-        return { content: [{ type: 'text', text: out.join('\n') }] };
-    });
-    // ---- fleet_status ----------------------------------------------------------
-    server.registerTool('fleet_status', {
-        description: 'Probe every fleet machine over SSH. Reports reachable/unreachable per host.',
-        inputSchema: {},
-    }, async () => {
-        const hosts = hostList(ctx);
-        if (!hosts.length)
-            return { content: [{ type: 'text', text: '(no fleet hosts)' }] };
-        const results = await Promise.all(hosts.map(async (h) => {
-            const r = await fleetProbe(h);
-            return `${r.ok ? '✔' : '✖'} ${h.name.padEnd(14)} ${h.host}${h.port ? ':' + h.port : ''} ${r.ok ? 'reachable' : 'unreachable — ' + r.detail}`;
-        }));
-        return { content: [{ type: 'text', text: results.join('\n') }] };
-    });
-}
-//# sourceMappingURL=fleet.js.map

package/dist/tools/fleet.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"fleet.js","sourceRoot":"","sources":["../../src/tools/fleet.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAkB,MAAM,kBAAkB,CAAC;AAE9D;;;;;;GAMG;AAEH,SAAS,QAAQ,CAAC,GAAgB;IAChC,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAiB,EAAE,GAAgB;IACpE,4EAA4E;IAC5E,MAAM,CAAC,YAAY,CAAC,YAAY,EAC9B;QACE,WAAW,EAAE,sFAAsF;QACnG,WAAW,EAAE,EAAE;KAChB,EACD,KAAK,IAAI,EAAE;QACT,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,+CAA+C,EAAE,CAAC,EAAE,CAAC;QACjH,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CACxB,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACvI,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEL,+EAA+E;IAC/E,MAAM,CAAC,YAAY,CAAC,cAAc,EAChC;QACE,WAAW,EAAE,6EAA6E;QAC1F,WAAW,EAAE,EAAE;KAChB,EACD,KAAK,IAAI,EAAE;QACT,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAC;QACpF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAC,CAAC,EAAC,EAAE;YACpD,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,CAAC,CAAC,CAAC;YAC9B,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,gBAAgB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/I,CAAC,CAAC,CAAC,CAAC;QACJ,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;IACnE,CAAC,CAAC,CAAC;AACP,CAAC"}