starmux 0.12.0 → 0.13.0

package/dist/vendor/desktop-commander/dist/utils/withTimeout.js

@@ -0,0 +1,85 @@
+/**
+ * Executes a promise with a timeout. If the promise doesn't resolve or reject within
+ * the specified timeout, returns the provided default value.
+ *
+ * @param operation The promise to execute
+ * @param timeoutMs Timeout in milliseconds
+ * @param operationName Name of the operation (for logs)
+ * @param defaultValue Value to return if the operation times out
+ * @returns Promise that resolves with the operation result or the default value on timeout
+ */
+export function withTimeout(operation, timeoutMs, operationName, defaultValue) {
+    // Don't sanitize operation name for logs - only telemetry will sanitize if needed
+    return new Promise((resolve, reject) => {
+        let isCompleted = false;
+        // Set up timeout
+        const timeoutId = setTimeout(() => {
+            if (!isCompleted) {
+                isCompleted = true;
+                if (defaultValue !== null) {
+                    resolve(defaultValue);
+                }
+                else {
+                    // Keep the original operation name in the error message
+                    // Telemetry sanitization happens at the capture level
+                    reject(`__ERROR__: ${operationName} timed out after ${timeoutMs / 1000} seconds`);
+                }
+            }
+        }, timeoutMs);
+        // Execute the operation
+        operation
+            .then(result => {
+            if (!isCompleted) {
+                isCompleted = true;
+                clearTimeout(timeoutId);
+                resolve(result);
+            }
+        })
+            .catch(error => {
+            if (!isCompleted) {
+                isCompleted = true;
+                clearTimeout(timeoutId);
+                if (defaultValue !== null) {
+                    resolve(defaultValue);
+                }
+                else {
+                    // Pass the original error unchanged - sanitization for telemetry happens in capture
+                    reject(error);
+                }
+            }
+        });
+    });
+}
+/**
+ * Run an operation under a timeout WITH real cancellation.
+ *
+ * Unlike withTimeout (which only races a timer and leaves the underlying work
+ * running — holding its libuv thread/fd until the OS call returns), this passes
+ * an AbortSignal into the operation and aborts it when the timeout fires, so a
+ * read/stream that honors the signal is cancelled and its resources released.
+ *
+ * Rejects with an Error whose `.code` is 'ETIMEDOUT' on timeout (so existing
+ * ETIMEDOUT handling / permission-error mapping keeps working).
+ *
+ * Caveat: an operation wedged inside a single un-interruptible syscall only
+ * observes the abort once that syscall returns; library reads that ignore the
+ * signal (e.g. Excel/PDF parsers) still get the timeout rejection but keep
+ * running in the background until they finish on their own.
+ */
+export function runWithAbortableTimeout(operation, timeoutMs, operationName) {
+    const controller = new AbortController();
+    let timeoutId;
+    const timeout = new Promise((_, reject) => {
+        timeoutId = setTimeout(() => {
+            controller.abort();
+            const error = new Error(`${operationName} timed out after ${timeoutMs / 1000} seconds`);
+            error.code = 'ETIMEDOUT';
+            reject(error);
+        }, timeoutMs);
+    });
+    const op = operation(controller.signal);
+    // Swallow the late abort rejection so it can't surface as an unhandled
+    // rejection after the timeout has already settled the race.
+    op.catch(() => { });
+    return Promise.race([op, timeout]).finally(() => clearTimeout(timeoutId));
+}

package/dist/vendor/desktop-commander/dist/version.js

@@ -0,0 +1 @@
+export const VERSION = '0.3.1';

package/dist/vendor/desktop-commander/package.json

@@ -0,0 +1,15 @@
+{
+  "name": "@wonderwhy-er/desktop-commander",
+  "version": "0.3.1",
+  "description": "Purified zero-telemetry build of Desktop Commander MCP for Starmux",
+  "license": "MIT",
+  "author": "Eduards Ruzga",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/wonderwhy-er/DesktopCommanderMCP.git"
+  },
+  "type": "module",
+  "bin": {
+    "desktop-commander": "dist/index.js"
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "starmux",
-  "version": "0.12.0",
+  "version": "0.13.0",
   "description": "Connect AI clients to files, terminals and development tools on your own computer.",
   "license": "MIT",
   "type": "module",
@@ -28,22 +28,34 @@
     "build:test": "npm run build",
     "prepare": "node scripts/prepare.mjs",
     "prepack": "npm run build",
+    "sync:upstream": "npm install --save-dev --save-exact @wonderwhy-er/desktop-commander@latest --ignore-scripts && npm run build",
     "test:oauth:keycloak": "npm run build && node --test dist/test/keycloak.integration.js"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "1.32.1",
-    "@wonderwhy-er/desktop-commander": "0.3.0",
+    "@opendocsg/pdf2md": "0.3.4",
+    "@vscode/ripgrep": "1.18.0",
+    "exceljs": "4.4.0",
+    "fastest-levenshtein": "1.0.16",
+    "isbinaryfile": "5.0.7",
     "jose": "6.2.12",
     "jsonc-parser": "3.3.1",
+    "pdf-lib": "1.17.1",
+    "pizzip": "3.3.0",
+    "proper-lockfile": "4.1.2",
+    "sharp": "0.35.5",
+    "unpdf": "1.8.0",
     "zod": "3.25.76",
     "zod-to-json-schema": "3.25.2"
   },
   "devDependencies": {
     "@types/node": "22.20.5",
+    "@wonderwhy-er/desktop-commander": "0.3.1",
     "typescript": "5.9.3"
   },
   "files": [
     "dist/src",
+    "dist/vendor",
     "src/dc-workspace-http.mjs",
     "scripts/prepare.mjs",
     "test/fixtures/p1-fixture.txt",